General
-
Target
TelegramRAT.exe
-
Size
111KB
-
Sample
240911-m6w55swgjj
-
MD5
025bf19e446008b4c106c0a7902d0642
-
SHA1
adfd46ffc2ed0d222300a14b44a3dc12501afc2d
-
SHA256
57fc2aa26b8201492d155bf05feb116cd0dc014731b62c3037c6fbfcd9f164f0
-
SHA512
ba105aad1638dbee0dd055a2fe558dba7da6c8561644fb4d4e2446d72b01f55eaaf61c024010b430fb0d76ebf89363217e329e366831a340944848f7498625fe
-
SSDEEP
1536:s+beLszyDM91qQIw5dxZxdyyKDWfCbhDqI6jQWCzCrAZuWXWDz:DbeLs2D8LZxjQbxqHjQWCzCrAZuW6z
Malware Config
Extracted
toxiceye
https://api.telegram.org/bot7514641915:AAFzogNbQamJYUwX_0HIALzpEmh0fhPZ-6o/sendMessage?chat_id=4545912113
Targets
-
-
Target
TelegramRAT.exe
-
Size
111KB
-
MD5
025bf19e446008b4c106c0a7902d0642
-
SHA1
adfd46ffc2ed0d222300a14b44a3dc12501afc2d
-
SHA256
57fc2aa26b8201492d155bf05feb116cd0dc014731b62c3037c6fbfcd9f164f0
-
SHA512
ba105aad1638dbee0dd055a2fe558dba7da6c8561644fb4d4e2446d72b01f55eaaf61c024010b430fb0d76ebf89363217e329e366831a340944848f7498625fe
-
SSDEEP
1536:s+beLszyDM91qQIw5dxZxdyyKDWfCbhDqI6jQWCzCrAZuWXWDz:DbeLs2D8LZxjQbxqHjQWCzCrAZuW6z
-
Executes dropped EXE
-
Enumerates processes with tasklist
-