General
-
Target
TelegramRAT.exe
-
Size
119KB
-
Sample
240831-t21fbstfqf
-
MD5
744a6669adfa8bce81e4597c2319e6c7
-
SHA1
231e577bebe54c02da09d4cc9edaad4788b9ffdd
-
SHA256
6c6bcda804f70c873780eaa7554011f89240ef5e20eb394ea9adf022d0987382
-
SHA512
1c2739e9339c82012077a9ca53bacd60c7db24bbec2be3eeea99eff61bc32f0f98364d2f8470de3cad0df4eb0a3f27d9640a5d17fd0394c7203c2f371663df62
-
SSDEEP
3072:F5LSptv0JOaqSj6O+H/bxqHoQWAzCrAZuSGn:r8eqg6n/bgL
Malware Config
Extracted
toxiceye
https://api.telegram.org/bot7082907700:AAFNviPXrHpaY6TWoCY2VClJln9DSSJ0vGE/sendMessage?chat_id=5590583541
Targets
-
-
Target
TelegramRAT.exe
-
Size
119KB
-
MD5
744a6669adfa8bce81e4597c2319e6c7
-
SHA1
231e577bebe54c02da09d4cc9edaad4788b9ffdd
-
SHA256
6c6bcda804f70c873780eaa7554011f89240ef5e20eb394ea9adf022d0987382
-
SHA512
1c2739e9339c82012077a9ca53bacd60c7db24bbec2be3eeea99eff61bc32f0f98364d2f8470de3cad0df4eb0a3f27d9640a5d17fd0394c7203c2f371663df62
-
SSDEEP
3072:F5LSptv0JOaqSj6O+H/bxqHoQWAzCrAZuSGn:r8eqg6n/bgL
-
Executes dropped EXE
-
Enumerates processes with tasklist
-