Extracted

• • Target

    1f521ee227e3116724605a34228f6689

  • Size

    14.7MB

  • MD5

    1f521ee227e3116724605a34228f6689

  • SHA1

    5f99b5c9ab84712df6d027aa5cf01d957ba4ba18

  • SHA256

    3bedffc329cda99ca31768fe92f32791dfb0ae6114b82dced21cb77e4411fcf7

  • SHA512

    f849026ed285503482f0c9eb01297fd24faf90b86bab59a15d3f79b1dd666a54b9bff0a17b67f4cf5900e053867d63795469c3d5b6871eb7fc7f045aee8d9da5

  • SSDEEP

    12288:mRXQK44fy6111111111111111111111111111111111111111111111111111113:mRx2

  Score

  10^/10

  tofseeevasionpersistencetrojan

  • Tofsee

    Backdoor/botnet which carries out malicious activities based on commands from a C2 server.

    trojantofsee

  • Creates new service(s)

    persistence

  • Modifies Windows Firewall

    evasion
  behavioral1behavioral2