MALHAWK Logo

MalHawk

Blogs

How a Fake Browser Update Loads Malware

November 30, 2025 SocGholishloaderfake-browser-updatesdrive-by-downloadbase64C2JavascriptruntimeActiveXObjectMSXML2.XMLHTTPOpenPGP-encryption

Analysing Socgholish, a Javascript malware Loader.

Read Analysis

Inside Redline, a Common Password-Stealing Malware

September 26, 2025 redlineinfo-stealercrypto walletstrojanbase64xorprocess hollowingexfiltrationC2pua

Analysing a commodity infostealer focused on harvesting credentials and wallet data.

Read Analysis

Keylogging Malware That Steals Credentials

August 26, 2025 hawkeyeinfo-stealerkeyloggertrojanform grabbingruntime modulesConfuserExprocess hollowingexfiltration

Analysis of the HawkEye reborn v9, a notorious keylogger and credential stealer with persistence techniques.

Read Analysis

A Word Document That Drops Malware

July 20, 2025 trojandropperdownloadervba macrostatic-analysis

Static analysis of a malicious Word document that uses VBA macros to deploy a multi-stage infection chain.

Read Analysis