Extracted

• • Target

    5388046d3857b4c97d326ab5a964b126d1f43e9db4703d6218de4871a6b02a09

  • Size

    111KB

  • MD5

    af988c40298a29b6f7dba1226ff31d5b

  • SHA1

    5f5d11205529b7996d2cbf0f62c9dbe57175eef2

  • SHA256

    5388046d3857b4c97d326ab5a964b126d1f43e9db4703d6218de4871a6b02a09

  • SHA512

    77eb82d6e687f8e8d136b57cd3083a1d39ed8d9ef62a55c3a6cebbb2d76e56974ddaf16078cadf5752fc08966571953910fed0d13a93da789a42d70f46547359

  • SSDEEP

    1536:/+bZQAsnqLoM91qQIwxHxxxdyyKDWfibhDqI64QWBzCrAZusMED1:Gbbsnwo0RxxjQbxqH4QWBzCrAZusb1

  Score

  10^/10

  toxiceyediscoveryrattrojan

  • ToxicEye

    ToxicEye is a trojan written in C#.

    rattrojantoxiceye

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Legitimate hosting services abused for malware hosting/C2

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2