General

  • Target

    TelegramRAT.exe

  • Size

    111KB

  • Sample

    240911-m5tzdswfnj

  • MD5

    5937dd288b0505109a6848fbc5f21265

  • SHA1

    06716e8152c903b0ac6a96ea9f34b9a670bfea65

  • SHA256

    24d7a1d54d63be2e2f54348ec4c0845812e153309db6ab16d064921dbc1f5047

  • SHA512

    739c69cafbaa43a5515fa18997b68601ac07af9d265c63d20c81ef7bdf1ebe8c9413eefc3fd5f368534e3dc482af9ed5927a56eef1497d185c35ba99ec8c8289

  • SSDEEP

    1536:U+bNLszyDM91qQIw5dxZxdyyKDWfCbhDqI6jQWCzCrAZuWPWDR:bbNLs2D8LZxjQbxqHjQWCzCrAZuWyR

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot7514641915:AAFzogNbQamJYUwX_0HIALzpEmh0fhPZ-6o/sendMessage?chat_id=4545912113

Targets

    • Target

      TelegramRAT.exe

    • Size

      111KB

    • MD5

      5937dd288b0505109a6848fbc5f21265

    • SHA1

      06716e8152c903b0ac6a96ea9f34b9a670bfea65

    • SHA256

      24d7a1d54d63be2e2f54348ec4c0845812e153309db6ab16d064921dbc1f5047

    • SHA512

      739c69cafbaa43a5515fa18997b68601ac07af9d265c63d20c81ef7bdf1ebe8c9413eefc3fd5f368534e3dc482af9ed5927a56eef1497d185c35ba99ec8c8289

    • SSDEEP

      1536:U+bNLszyDM91qQIw5dxZxdyyKDWfCbhDqI6jQWCzCrAZuWPWDR:bbNLs2D8LZxjQbxqHjQWCzCrAZuWyR

MITRE ATT&CK Enterprise v15

Tasks