Extracted

• • Target

    24e7e55104c81fd3475a9ef3c5793e0d

  • Size

    13.5MB

  • MD5

    24e7e55104c81fd3475a9ef3c5793e0d

  • SHA1

    2e0199e1d53bb01fa88627c635eeb7a536b423f3

  • SHA256

    bc9ad68ce7fadb5334dcad56464a9f19bd010f91d042146efd475ee75cd66fcf

  • SHA512

    7780247138929e6b0f7301341192e02ffe3f8f9c94ee940872297aca2493d6d5e92f212acf909379c0c680e9b687f5bb27caba32308da5b1704ed9156200d9e0

  • SSDEEP

    49152:V1yvllllllllllllllllllllllllllllllllllllllllllllllllllllllllllln:VA

  Score

  10^/10

  tofseeevasionpersistencetrojan

  • Tofsee

    Backdoor/botnet which carries out malicious activities based on commands from a C2 server.

    trojantofsee

  • Creates new service(s)

    persistence

  • Modifies Windows Firewall

    evasion

  • Executes dropped EXE

  behavioral1behavioral2