Resubmissions

18-05-2024 18:22

240518-wz59xahc67 10

18-05-2024 18:18

240518-wxrnqsha89 10

18-05-2024 18:17

240518-ww87dsha59 10

18-05-2024 18:15

240518-wwazlagh94 10

General

  • Target

    Sh1zoRat.exe

  • Size

    119KB

  • MD5

    f548ca220d471a524cb1c7d8ff613721

  • SHA1

    3040c8945b16a58f44dd4f1ae5a7b0faf61b405e

  • SHA256

    5d0be378578617a2264e822d1b4424d71e8fa3e8dad60b30af614b173682880b

  • SHA512

    b1ea254c1ab6c3983cdb906f39403da5b342fed1836b14b4654a0e25dcae274edc517e30ec66fefbeb6f511b89e869a4d785098896bf55eac36108c79494c158

  • SSDEEP

    3072:BKUpvwYGqOcW7gabRq15QWXzCrAZu8Gq:MIWMabAL

Score
10/10

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot6444357834:AAGtL3te5_xl4dvacn8BJElHrky5SlLcE_4/sendMessage?chat_id=5974265372

Signatures

  • Toxiceye family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Sh1zoRat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections