General

  • Target

    a01d6062308781d37c5270fdba230231

  • Size

    111KB

  • Sample

    240216-l8lazsgc71

  • MD5

    a01d6062308781d37c5270fdba230231

  • SHA1

    61083d8d892adfbb53c2684e2ae14236e9f0c78e

  • SHA256

    587dae991f27a9e18c7bb98f6bd0785fe2894ec2464bddec729a1d243a7dda45

  • SHA512

    cf544c32e92c49a8a51c38ae7c7431951421b48f091de1e7bd35bdd5624b1370faf8245d06c769fa9af38b803c9cceb65628276dffcd8371b0857b320e62c367

  • SSDEEP

    3072:mb8YUuQaS+T8sNoVWloStVjNhOYJbxqHdQWbzCrAZuxsy:hYUuQaS+T8sNoVWlLHN9bgt

Score
10/10

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot1857786160:AAGDD7DgtbFIfWo0zZZYzaCSIulgMOW4U5E/sendMessage?chat_id=1835799378

Targets

    • Target

      a01d6062308781d37c5270fdba230231

    • Size

      111KB

    • MD5

      a01d6062308781d37c5270fdba230231

    • SHA1

      61083d8d892adfbb53c2684e2ae14236e9f0c78e

    • SHA256

      587dae991f27a9e18c7bb98f6bd0785fe2894ec2464bddec729a1d243a7dda45

    • SHA512

      cf544c32e92c49a8a51c38ae7c7431951421b48f091de1e7bd35bdd5624b1370faf8245d06c769fa9af38b803c9cceb65628276dffcd8371b0857b320e62c367

    • SSDEEP

      3072:mb8YUuQaS+T8sNoVWloStVjNhOYJbxqHdQWbzCrAZuxsy:hYUuQaS+T8sNoVWlLHN9bgt

    Score
    10/10
    • ToxicEye

      ToxicEye is a trojan written in C#.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks