General

  • Target

    0e08fd42b72428353738a47765a4fe33

  • Size

    323KB

  • Sample

    231230-est5maadcn

  • MD5

    0e08fd42b72428353738a47765a4fe33

  • SHA1

    408d118f5527f4f47f2084098dd4391248d889c2

  • SHA256

    e80980441a46b804f0724d7384ad5472b933adc6dbee72c2a8bb678269c446cb

  • SHA512

    d3346157a54f715fe4831cbd8f57e3455de2f3a339218a13349731f0aa21cab548fe1483169d75329c1d0c105d4815a96f41121879b62d6d0b0d7efed485c806

  • SSDEEP

    3072:g9C7aCj5nBYKAOQwSl1G5aXUMEZlygA9WVW2qpjQHgXUFShsBEmC6KMCGgBQ:g9C7r5nBYKAOQwTUXYz9H1CG

Score
10/10

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot1776678662:AAH279kNCdZFK5o7TkT7yGeGh8L9WgRtTUA/sendMessage?chat_id=981052588

Targets

    • Target

      0e08fd42b72428353738a47765a4fe33

    • Size

      323KB

    • MD5

      0e08fd42b72428353738a47765a4fe33

    • SHA1

      408d118f5527f4f47f2084098dd4391248d889c2

    • SHA256

      e80980441a46b804f0724d7384ad5472b933adc6dbee72c2a8bb678269c446cb

    • SHA512

      d3346157a54f715fe4831cbd8f57e3455de2f3a339218a13349731f0aa21cab548fe1483169d75329c1d0c105d4815a96f41121879b62d6d0b0d7efed485c806

    • SSDEEP

      3072:g9C7aCj5nBYKAOQwSl1G5aXUMEZlygA9WVW2qpjQHgXUFShsBEmC6KMCGgBQ:g9C7r5nBYKAOQwTUXYz9H1CG

    Score
    10/10
    • ToxicEye

      ToxicEye is a trojan written in C#.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks