Extracted

• • Target

    TelegramRAT.exe

  • Size

    121KB

  • MD5

    117a350a0991d312d62eea33933f4f9b

  • SHA1

    3c4c2b9608bdf3b7e477cef26e12721187fb5558

  • SHA256

    a52f043910c50f8d250162379935316f63db792bf9824afd5dc326e12676a089

  • SHA512

    d09e19366b912189415c3eb8ca427afedbcd3baca280b33bad5e6817ec5ec01f09e4b9d5be32e63694a48c55bd962099182af64a34dbe2615fdb82963c497809

  • SSDEEP

    3072:/ItZ1HOSJAwncZ+5OG3wy+pKbxqHLQWHzCrAZuaNu:Lx+AG3wtKbg3

  Score

  10^/10

  toxiceyediscoveryrattrojan

  • ToxicEye

    ToxicEye is a trojan written in C#.

    rattrojantoxiceye

  • Toxiceye family

    toxiceye

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2