Overview

overview

10

Static

static

10

1ee0f288b9...68.exe

windows7-x64

10

1ee0f288b9...68.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    1ee0f288b931c649d0442590346cb778a3706d74322c24e1714cf124e9f23b68
  • Size 111KB
  • Sample240816-19acfatgrm
  • SHA256 1ee0f288b931c649d0442590346cb778a3706d74322c24e1714cf124e9f23b68
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
toxiceyediscoveryrattrojan

Malware Config

Extracted

Family

  • toxiceye

C2

  • https://api.telegram.org/bot7302074945:AAGKx5TnjPyRM_fqN4XQLd4uz-PUp4nl8w4/sendMessage?chat_id=6414125020

Targets

    • Target
      1ee0f288b931c649d0442590346cb778a3706d74322c24e1714cf124e9f23b68
    • Size 111KB
    • SHA256 1ee0f288b931c649d0442590346cb778a3706d74322c24e1714cf124e9f23b68
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    toxiceyediscoveryrattrojan

    • ToxicEye

      ToxicEye is a trojan written in C#.

      rattrojantoxiceye

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks