Extracted

• • Target

    4097178d42417041c6dfce21a0702db1

  • Size

    12.2MB

  • MD5

    4097178d42417041c6dfce21a0702db1

  • SHA1

    7c42b2d34f8a175c3d9dff286329e4e562f0c881

  • SHA256

    30cda9b67432d82254db302482b46478ef00329dd6ebffde2433acfbb524fa21

  • SHA512

    6effa7b8fb3e17cca13c0dcd162554e5c3df6640eb12ba4d3adbf8d909026a40ab5cdd369e393d08b5c06d0e4aebcdb550a22713c6961b30627a4b8eb178b7d6

  • SSDEEP

    24576:AUqN67OT8888888888888888888888888888888888888888888888888888888P:AK7

  Score

  10^/10

  tofseeevasionpersistencetrojan

  • Tofsee

    Backdoor/botnet which carries out malicious activities based on commands from a C2 server.

    trojantofsee

  • Creates new service(s)

    persistence

  • Modifies Windows Firewall

    evasion

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2