MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a4a8c9a09d3819dd869cb7fc00d7417de083f403aef66aff18be7c8bf8eb1ef9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a4a8c9a09d3819dd869cb7fc00d7417de083f403aef66aff18be7c8bf8eb1ef9
SHA3-384 hash: f03415f9530e8473f005d060e809cef223f49a8940d982896b6db97b6de7a3b9a05ea54610fbebff18f3983a4d054336
SHA1 hash: 88b7479c8096d88d19d00acc367c3145a1c904af
MD5 hash: b33ea85e2f08fc6aee0557cf618019f4
humanhash: alpha-robert-happy-orange
File name:REQUEST FOR QUOTATION.zip
Download: download sample
Signature HawkEye
Create hunting rule
File size:575'521 bytes
First seen:2020-06-22 06:48:27 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:Q20Xl1E2m1xPYNavL2A2V4R7dnlLPzzZt7pAbX4cd236GPFsQkC:Q2U1E2m1xPYy2A2V4R7JpPzzZTdcYjVZ
TLSH 3CC42385FABBCF5FF0540E9484608A2D7D88AB94029179DB7392FC80087F25A747E738
Reporter abuse_ch
Tags:HawkEye zip


Avatar
abuse_ch
Malspam distributing HawkEye:

HELO: taiwantrade.com
Sending IP: 156.96.118.53
From: e-member<e-member@taiwantrade.com>
Reply-To: onemilliondo@gmail.com
Subject: RE: TOP URGENT REQUEST FOR QUOTATION
Attachment: REQUEST FOR QUOTATION.zip (contains "debb.exe")

HawkEye SMTP exfil server:
smtp.na-superhrd.com:587

HawkEye SMTP exfil email address:
deberelucks@na-superhrd.com

Intelligence

File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a4a8c9a09d3819dd869cb7fc00d7417de083f403aef66aff18be7c8bf8eb1ef9/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-22 06:50:05 UTC
AV detection:
20 of 48 (41.67%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=usumtie5ham53bu4w76abv2bpxqih5adv33gv7yyxz6ix6hld34q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

zip a4a8c9a09d3819dd869cb7fc00d7417de083f403aef66aff18be7c8bf8eb1ef9

(this sample)

HawkEye

Executable exe 5bd7a6647711c5f5c13708afcb275753e5b97044a508a947ce760e57740a568e

  
Dropping
MD5 e65498ba795bf6ffbdb767d3004593e1
  
Dropping
HawkEye
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 5bd7a6647711c5f5c13708afcb275753e5b97044a508a947ce760e57740a568e

Comments