Overview

overview

10

Static

static

10

RookieSide....2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RookieSideloader2.4.2.exe

  • Size

    175KB

  • Sample

    240517-cs9h7sda5y

  • MD5

    b6fc8d9f29f88a28b503dd7d5f07845f

  • SHA1

    d8013873cca8bd22f645462b6a61a5b93fe9e8ac

  • SHA256

    02c7134832ad61cbc849dc3a86b760dd2e0d8b8006ef9a528c49f58c58ad4754

  • SHA512

    611d02f2fe66bab5a7a8959d21179caf4162c52a38867d0e35eccba2db56321f196a4165b9a89c87029b7a6ea8b4f8bdaa8f645c93a260ddc92671e50e654139

  • SSDEEP

    1536:C+bAQAsnqLoM91qQIwxUZXnLoBn0x4HbhSqI64QWmzCrAZuoQtpV:FbKsnwo0WPaboqH4QWmzCrAZuoMV

Score
10/10
toxiceyerattrojan

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot6984690567:AAGHPW4k4aUBr_HzwNyCVuOcTuDnmw8Xzuw/sendMessage?chat_id=6751370598

Targets

    • Target

      RookieSideloader2.4.2.exe

    • Size

      175KB

    • MD5

      b6fc8d9f29f88a28b503dd7d5f07845f

    • SHA1

      d8013873cca8bd22f645462b6a61a5b93fe9e8ac

    • SHA256

      02c7134832ad61cbc849dc3a86b760dd2e0d8b8006ef9a528c49f58c58ad4754

    • SHA512

      611d02f2fe66bab5a7a8959d21179caf4162c52a38867d0e35eccba2db56321f196a4165b9a89c87029b7a6ea8b4f8bdaa8f645c93a260ddc92671e50e654139

    • SSDEEP

      1536:C+bAQAsnqLoM91qQIwxUZXnLoBn0x4HbhSqI64QWmzCrAZuoQtpV:FbKsnwo0WPaboqH4QWmzCrAZuoMV

    Score
    10/10
    toxiceyerattrojan

    • ToxicEye

      ToxicEye is a trojan written in C#.

      rattrojantoxiceye

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks