hawkeye | e64399a0fb32e113eb4768f4145084b2673da71d788fdaa6bcea3f4fb221985b | Triage

Sharing

General

Target

JaffaCakes118_617e65c58be037e1341cff1dda6e1c1a
Size

103KB
Sample

250310-1d47yaztfv
MD5

617e65c58be037e1341cff1dda6e1c1a
SHA1

f7aa835b872eca587aeab5cb5c55c2b5d57b0134
SHA256

e64399a0fb32e113eb4768f4145084b2673da71d788fdaa6bcea3f4fb221985b
SHA512

e72442e3c30da820e375c12290b20ea474b931da5f70d1742a23d4d3215dba60780864e4cab66cd12349fcfc53ae7edf9338a8d79c3f651bd52fe0ef611b0d77
SSDEEP

1536:Lj2qkSZZZ3gd/W2hE4RX39IUZp0iPMVqmWLFIPGoD2mabZPhpjvIBEs5DuPxj0:LjYUAWCEI9IUYiPMVgoZgZPh5vyEBP50

Score

10^/10

hawkeye discovery keylogger persistence spyware stealer trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_617e65c58be037e1341cff1dda6e1c1a
- Size
  
  103KB
- MD5
  
  617e65c58be037e1341cff1dda6e1c1a
- SHA1
  
  f7aa835b872eca587aeab5cb5c55c2b5d57b0134
- SHA256
  
  e64399a0fb32e113eb4768f4145084b2673da71d788fdaa6bcea3f4fb221985b
- SHA512
  
  e72442e3c30da820e375c12290b20ea474b931da5f70d1742a23d4d3215dba60780864e4cab66cd12349fcfc53ae7edf9338a8d79c3f651bd52fe0ef611b0d77
- SSDEEP
  
  1536:Lj2qkSZZZ3gd/W2hE4RX39IUZp0iPMVqmWLFIPGoD2mabZPhpjvIBEs5DuPxj0:LjYUAWCEI9IUYiPMVgoZgZPh5vyEBP50
Score

10^/10

hawkeye discovery keylogger persistence spyware stealer trojan
- HawkEye
  HawkEye is a malware kit that has seen continuous development since at least 2013.
  keylogger trojan stealer spyware hawkeye
- Hawkeye family
  hawkeye
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

hawkeyediscoverykeyloggerpersistencespywarestealertrojan

behavioral2

hawkeyediscoverykeyloggerpersistencespywarestealertrojan