General

  • Target

    2aba3d65b4410e0dfb8e328cd081e1aa.bin

  • Size

    136KB

  • Sample

    240304-b21f8aed4v

  • MD5

    2aba3d65b4410e0dfb8e328cd081e1aa

  • SHA1

    570baf9e4fcd9735d90bd9bc461b70f143e6934a

  • SHA256

    af9d1582852905516ee58316f875a8df81beff906e28f5406486c4c62463ead4

  • SHA512

    4670ae6c28364e54b05d277aa43911b26ea0ed76a4e284cb410050a1cf2913d067e88b1bfa007cef0debea5c231acfdb2fb93f1e1c1540d1c50890d473bcdf60

  • SSDEEP

    3072:c78TXzjFl2Chi74tqiokbPFfmQWegCrAZB0qd:QczjFE4oiokbN0O

Score
10/10

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot7040511851:AAEjBKSxADGWlNtLxaKpotGtf53NUQ1UgAo/sendMessage?chat_id=6226815698

Targets

    • Target

      2aba3d65b4410e0dfb8e328cd081e1aa.bin

    • Size

      136KB

    • MD5

      2aba3d65b4410e0dfb8e328cd081e1aa

    • SHA1

      570baf9e4fcd9735d90bd9bc461b70f143e6934a

    • SHA256

      af9d1582852905516ee58316f875a8df81beff906e28f5406486c4c62463ead4

    • SHA512

      4670ae6c28364e54b05d277aa43911b26ea0ed76a4e284cb410050a1cf2913d067e88b1bfa007cef0debea5c231acfdb2fb93f1e1c1540d1c50890d473bcdf60

    • SSDEEP

      3072:c78TXzjFl2Chi74tqiokbPFfmQWegCrAZB0qd:QczjFE4oiokbN0O

    Score
    10/10
    • ToxicEye

      ToxicEye is a trojan written in C#.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks