Overview

overview

10

Static

static

3

3c9700ae96...3f.exe

windows7-x64

10

3c9700ae96...3f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    3c9700ae96d0130e8799aebf0de2673f
  • Size 11.9MB
  • Sample240101-l9765sbdc3
  • SHA256 6b22216ddffd7e44376afee0c9055a416b2e1cb310806981b5da60b7b95ecd3f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
tofseeevasionpersistencetrojan

Malware Config

Extracted

Family

  • tofsee

C2

  • defeatwax.ru

  • refabyd.info

Targets

    • Target
      3c9700ae96d0130e8799aebf0de2673f
    • Size 11.9MB
    • SHA256 6b22216ddffd7e44376afee0c9055a416b2e1cb310806981b5da60b7b95ecd3f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    tofseeevasionpersistencetrojan

    • Tofsee

      Backdoor/botnet which carries out malicious activities based on commands from a C2 server.

      trojantofsee

    • Creates new service(s)

      persistence

    • Modifies Windows Firewall

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks