General

  • Target

    TelegramRAT.exe

  • Size

    119KB

  • Sample

    240831-t21fbstfqf

  • MD5

    744a6669adfa8bce81e4597c2319e6c7

  • SHA1

    231e577bebe54c02da09d4cc9edaad4788b9ffdd

  • SHA256

    6c6bcda804f70c873780eaa7554011f89240ef5e20eb394ea9adf022d0987382

  • SHA512

    1c2739e9339c82012077a9ca53bacd60c7db24bbec2be3eeea99eff61bc32f0f98364d2f8470de3cad0df4eb0a3f27d9640a5d17fd0394c7203c2f371663df62

  • SSDEEP

    3072:F5LSptv0JOaqSj6O+H/bxqHoQWAzCrAZuSGn:r8eqg6n/bgL

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot7082907700:AAFNviPXrHpaY6TWoCY2VClJln9DSSJ0vGE/sendMessage?chat_id=5590583541

Targets

    • Target

      TelegramRAT.exe

    • Size

      119KB

    • MD5

      744a6669adfa8bce81e4597c2319e6c7

    • SHA1

      231e577bebe54c02da09d4cc9edaad4788b9ffdd

    • SHA256

      6c6bcda804f70c873780eaa7554011f89240ef5e20eb394ea9adf022d0987382

    • SHA512

      1c2739e9339c82012077a9ca53bacd60c7db24bbec2be3eeea99eff61bc32f0f98364d2f8470de3cad0df4eb0a3f27d9640a5d17fd0394c7203c2f371663df62

    • SSDEEP

      3072:F5LSptv0JOaqSj6O+H/bxqHoQWAzCrAZuSGn:r8eqg6n/bgL

MITRE ATT&CK Enterprise v15

Tasks