General
-
Target
12.exe
-
Size
121KB
-
Sample
241228-lnjawsxkhv
-
MD5
117a350a0991d312d62eea33933f4f9b
-
SHA1
3c4c2b9608bdf3b7e477cef26e12721187fb5558
-
SHA256
a52f043910c50f8d250162379935316f63db792bf9824afd5dc326e12676a089
-
SHA512
d09e19366b912189415c3eb8ca427afedbcd3baca280b33bad5e6817ec5ec01f09e4b9d5be32e63694a48c55bd962099182af64a34dbe2615fdb82963c497809
-
SSDEEP
3072:/ItZ1HOSJAwncZ+5OG3wy+pKbxqHLQWHzCrAZuaNu:Lx+AG3wtKbg3
Malware Config
Extracted
toxiceye
https://api.telegram.org/bot7677893184:AAE0-PsPfzGgNiPGIk585ulPgzKriWDrM10/sendMessage?chat_id=7494459853
Targets
-
-
Target
12.exe
-
Size
121KB
-
MD5
117a350a0991d312d62eea33933f4f9b
-
SHA1
3c4c2b9608bdf3b7e477cef26e12721187fb5558
-
SHA256
a52f043910c50f8d250162379935316f63db792bf9824afd5dc326e12676a089
-
SHA512
d09e19366b912189415c3eb8ca427afedbcd3baca280b33bad5e6817ec5ec01f09e4b9d5be32e63694a48c55bd962099182af64a34dbe2615fdb82963c497809
-
SSDEEP
3072:/ItZ1HOSJAwncZ+5OG3wy+pKbxqHLQWHzCrAZuaNu:Lx+AG3wtKbg3
-
Toxiceye family
-
Executes dropped EXE
-
Enumerates processes with tasklist
-