MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4b6870606a400bc75f88e420378761a0ea63a1ea0b88786906f8a09645d5584a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4b6870606a400bc75f88e420378761a0ea63a1ea0b88786906f8a09645d5584a
SHA3-384 hash: b9765e73a54049cb96d0ba679b74a47603559f900b49a205330d7311e6fdd1c12d386722ece46f3f54bd33554ce40378
SHA1 hash: bc6015fa28dbf63233465fd3299c1898ed733347
MD5 hash: 889468b3ab06d8b8161f95a4b8154171
humanhash: stream-illinois-friend-florida
File name:Versanddetails.zip
Download: download sample
Signature HawkEye
Create hunting rule
File size:501'712 bytes
First seen:2020-06-15 13:55:32 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:3Sq1Yg9XKLrU9rYLHpTAht0Z9mdRs3fEn/:CELK0OLJAQPQevE
TLSH 29B423634F921BE8E85F64ED0E470C537EA2A77ECA31DDE08276BDE7790901A635025C
Reporter abuse_ch
Tags:DEU DHL geo HawkEye zip


Avatar
abuse_ch
Malspam distributing HawkEye:

From: DHL DELIVERY SERVICE <no-reply@dhl.de>
Reply-To: mark@zoomwebmedia.com
Subject: Re: Versanddetails
Attachment: Versanddetails.zip (contains "Versanddetails.exe")

HawkEye SMTP exfil server:
server165.web-hosting.com:26

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Kryptik.WEZ.5146.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Golroted
Create hunting rule
Status:
Malicious
First seen:
2020-06-15 13:57:04 UTC
AV detection:
19 of 48 (39.58%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=jnuhaydkiaf4ox4i4qqdpb3budvghipkboehq2ig7cqjmrovlbfa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

zip 4b6870606a400bc75f88e420378761a0ea63a1ea0b88786906f8a09645d5584a

(this sample)

HawkEye

Executable exe d4bddb73683cb2f5f9ff8fbcbfbc6bff85717a4189a98ff90cd2bbd46b7a35cf

  
Dropping
MD5 363669ceb5dd7f5aac373bcf2a041d7d
  
Dropping
HawkEye
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d4bddb73683cb2f5f9ff8fbcbfbc6bff85717a4189a98ff90cd2bbd46b7a35cf

Comments