MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 11f7ede55463505baecc8fc1ebc5cc3701044389351fa3b742e5aed17d2724db. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 11f7ede55463505baecc8fc1ebc5cc3701044389351fa3b742e5aed17d2724db
SHA3-384 hash: 179e7db58fa10e510c2edc541f6418aa0d5bd85fa5a3fbb754001066087d74e1ec0458c03e2f0d009cf9945133659784
SHA1 hash: 292b9936277840626b5ba802181b178d0f7e4388
MD5 hash: 3c4d38e9a0897587496c4167910a5c80
humanhash: spring-wolfram-washington-louisiana
File name:Seaway HBL copy CREDIT NOTE.zip
Download: download sample
Signature HawkEye
Create hunting rule
File size:1'534'053 bytes
First seen:2020-05-11 09:09:55 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:Du/L7+JIcsFXM9FsacTa04R8wWRdALpn3nQWB7VyIUWCBiaijKMbvaDMu6l5eDE/:DuzeEu9FEBALp3Qko9KOOvaDMu6jeYgq
TLSH AC65333FA4DF10BFAB934E4BA549A5B61C89C408BCC9254DB7C9B91169C07B84DFC742
Reporter abuse_ch
Tags:HawkEye zip


Avatar
abuse_ch
Malspam distributing HawkEye:

From: SEATRANS SERVICES PVT LTD <rohan.jayawardena@multywaychem.com>
Subject: NEW SHIPMENT PRE ALERT
Attachment: Seaway HBL copy CREDIT NOTE.zip (contains "Seaway HBL copy & CREDIT NOTE.exe")

HawkEye SMTP exfil server:
us2.smtp.mailhostbox.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
86
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27686.AidExe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.PSW.Agent.BORA.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-11 09:36:20 UTC
File Type:
Binary (Archive)
Extracted files:
27
AV detection:
19 of 48 (39.58%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ch363zkumnifxlwmr7a6xromg4aqiq4jgup2hn2c4wxnc7jhetnq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

zip 11f7ede55463505baecc8fc1ebc5cc3701044389351fa3b742e5aed17d2724db

(this sample)

HawkEye

Executable exe e3e7451b75ac83f674865fe1f4dd3da02cb1cb1c5015b3df36d0d2416e6c6e2b

  
Dropping
MD5 3fb5f58bb106a4fc46c7cd7d021cd9c7
  
Dropping
HawkEye
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e3e7451b75ac83f674865fe1f4dd3da02cb1cb1c5015b3df36d0d2416e6c6e2b

Comments