Extracted

• • Target

    378b0ac112a719e6d5f8b31603877690N.exe

  • Size

    119KB

  • MD5

    378b0ac112a719e6d5f8b31603877690

  • SHA1

    27c6e0cdee370a6ff54efc949727c9076870dcab

  • SHA256

    f23dac3626300010fbfdedaec9cf07d0890b3acec0190283ecb0b545de22ecb8

  • SHA512

    c0788079b2bc9dfafc3b5cb48b45f33974bb26004b3d3c07893fdde8c56e5cd0409b3b82c7313ddfb89d31de9580ddb0be4ab3604dd49b85fc3674ec6f130588

  • SSDEEP

    3072:qOfRzlXCwwFwOwWAmm+m/bxqH8QWrzCrAZu8VDpyD/d+OC:qr1SWH+/bgi1VDpyD/Y

  Score

  10^/10

  toxiceyediscoveryrattrojan

  • ToxicEye

    ToxicEye is a trojan written in C#.

    rattrojantoxiceye

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2