Extracted

• • Target

    c2d94e9579a169f3ccc2003ffb38e69d4c1471f6c24b199adeeb3d88d15c5f78

  • Size

    4.8MB

  • MD5

    c3c762bdf1f673328017ec983249e09e

  • SHA1

    64dc43657c00deb05ad6af004e413b5f79b045a6

  • SHA256

    c2d94e9579a169f3ccc2003ffb38e69d4c1471f6c24b199adeeb3d88d15c5f78

  • SHA512

    7bc0addbea5a3616cf8ed9886c49719d60b2d04e8c9406a1c1f3b382cc3fa4f980882533509fbd98d15ca76735922e56d54762e3402cefbd185721ef5048b8e2

  • SSDEEP

    98304:kK/ZoaObB9IEBiDvXCh3YKxugzUHU9Mrfmr8hYE7j+RJ5HHuQB:P/usEBKeHNN1IvjaJ5HHuS

  Score

  10^/10

  tofseediscoverytrojan

  • Tofsee

    Backdoor/botnet which carries out malicious activities based on commands from a C2 server.

    trojantofsee

  • Tofsee family

    tofsee

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1