Overview

overview

10

Static

static

10

virus.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    virus.exe

  • Size

    793KB

  • Sample

    241206-sjdyyayqgm

  • MD5

    835d21dc5baa96f1ce1bf6b66d92d637

  • SHA1

    e0fb2a01a9859f0d2c983b3850c76f8512817e2d

  • SHA256

    e67f2b34ef647d59eb8ebd4a88f85dc072346ca5c275cba1ee2307b80a560319

  • SHA512

    747a9b6cde0207c722a62904a2c8708188f7c9e65e94cf55667e90096f1d1852e145061bd8e764bf30aaca0fb0f4355668feccc951041af735677c4c644aba87

  • SSDEEP

    24576:rcHV1ApBOr1sU6uEgjhlOCDw8mEFAuYg2OWpTMqBx+fdTmG2Y4MT9ffD+CzKcbm+:oApBOr1sU6uEgjhlOCDw8mEFAuYg2OWm

Score
10/10
toxiceyediscoveryrattrojan

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot5687152406:AAFin_LYFhJGLydMgYheeUDec-2orew51aM/sendMessage?chat_id=2024893777

Targets

    • Target

      virus.exe

    • Size

      793KB

    • MD5

      835d21dc5baa96f1ce1bf6b66d92d637

    • SHA1

      e0fb2a01a9859f0d2c983b3850c76f8512817e2d

    • SHA256

      e67f2b34ef647d59eb8ebd4a88f85dc072346ca5c275cba1ee2307b80a560319

    • SHA512

      747a9b6cde0207c722a62904a2c8708188f7c9e65e94cf55667e90096f1d1852e145061bd8e764bf30aaca0fb0f4355668feccc951041af735677c4c644aba87

    • SSDEEP

      24576:rcHV1ApBOr1sU6uEgjhlOCDw8mEFAuYg2OWpTMqBx+fdTmG2Y4MT9ffD+CzKcbm+:oApBOr1sU6uEgjhlOCDw8mEFAuYg2OWm

    Score
    10/10
    toxiceyediscoveryrattrojan

    • ToxicEye

      ToxicEye is a trojan written in C#.

      rattrojantoxiceye

    • Toxiceye family

      toxiceye

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates processes with tasklist

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks