General

  • Target

    fba0c53c2c8474675d779172a6acb413f7a81ade4f983616e08b117a55555c94

  • Size

    105KB

  • Sample

    231023-k5p94ahc85

  • MD5

    da9cc4e4135e5ab525f11c3b3f664096

  • SHA1

    4afbc8b795da9f9b067c7df51200c360853aac47

  • SHA256

    fba0c53c2c8474675d779172a6acb413f7a81ade4f983616e08b117a55555c94

  • SHA512

    cf6f782ebded8ae27119b606c3edc972f063c49e444cfab4d78ed356bc2f5089abecc93cc0d0d3d3356f01237857b7bf21d262fc5899867e69bca193d8894676

  • SSDEEP

    3072:leIL1GcZLw7PUq7QLjPscKO7b1UQWPUCrYZod5:rFw7PUq7Q8C7bf

Score
10/10

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot1540181760:AAEnIs2M31DEIo0eweKbO3grGRLd0kFkByk/sendMessage?chat_id=1314803697

Targets

    • Target

      fba0c53c2c8474675d779172a6acb413f7a81ade4f983616e08b117a55555c94

    • Size

      105KB

    • MD5

      da9cc4e4135e5ab525f11c3b3f664096

    • SHA1

      4afbc8b795da9f9b067c7df51200c360853aac47

    • SHA256

      fba0c53c2c8474675d779172a6acb413f7a81ade4f983616e08b117a55555c94

    • SHA512

      cf6f782ebded8ae27119b606c3edc972f063c49e444cfab4d78ed356bc2f5089abecc93cc0d0d3d3356f01237857b7bf21d262fc5899867e69bca193d8894676

    • SSDEEP

      3072:leIL1GcZLw7PUq7QLjPscKO7b1UQWPUCrYZod5:rFw7PUq7Q8C7bf

    Score
    10/10
    • ToxicEye

      ToxicEye is a trojan written in C#.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks