General

  • Target

    TelegramRAT.exe

  • Size

    217KB

  • MD5

    2360a3ca7c7f56a98889f16806232d5c

  • SHA1

    996836af3b7ad850bb3977d956d0f6b4f22f95fe

  • SHA256

    4945a6badc2b589030801440381322724ad39a595018fb48292160d44ce5f575

  • SHA512

    3b579dad203a49b39ac03c4bc06bd6d997aac379dd1e4254431354cab202bf739891fbe683e0c6ad95a795cfc32518a49b1f5bd89c152495eb5cdb6baf910071

  • SSDEEP

    3072:nyWNMOa+IuWSgKyuwa+IuWEjZkYq6GY2cy962KTKvgXX9vH42V0Oj1ZNxCii/8Sx:9hKTfg2mOpxpRaxHUSlQ0L4bEu

Score
10/10

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot6480398830:AAFQyqU2jJkoow45xDM_BRll8AzNh3bMWuM/sendMessage?chat_id=5234218001

Signatures

  • Toxiceye family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TelegramRAT.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections