Extracted

• • Target

    TelegramRAT.exe

  • Size

    217KB

  • MD5

    2360a3ca7c7f56a98889f16806232d5c

  • SHA1

    996836af3b7ad850bb3977d956d0f6b4f22f95fe

  • SHA256

    4945a6badc2b589030801440381322724ad39a595018fb48292160d44ce5f575

  • SHA512

    3b579dad203a49b39ac03c4bc06bd6d997aac379dd1e4254431354cab202bf739891fbe683e0c6ad95a795cfc32518a49b1f5bd89c152495eb5cdb6baf910071

  • SSDEEP

    3072:nyWNMOa+IuWSgKyuwa+IuWEjZkYq6GY2cy962KTKvgXX9vH42V0Oj1ZNxCii/8Sx:9hKTfg2mOpxpRaxHUSlQ0L4bEu

  Score

  10^/10

  toxiceyerattrojan

  • ToxicEye

    ToxicEye is a trojan written in C#.

    rattrojantoxiceye

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  behavioral1behavioral2