Extracted

• • Target

    ChromeUpdate.exe

  • Size

    119KB

  • MD5

    a39f21db0576a82177ee4c806766d763

  • SHA1

    ee4676f4dedd24003ce1bd972cbce95ef51fa07f

  • SHA256

    825509eb0672d6114194c773b017d5d41d9e67be4fe41f753f9c6bb37b1c32db

  • SHA512

    ea07e5d6f2b8ae0fbf8c1931d844bfbff920b3c9f83d10d38bd76828ed2d8a4b849251a87f5e2ad6bb1e9d9b1e5a75520baf2b70e063f44595e058c433be1133

  • SSDEEP

    3072:IAWfRzlXCwwFwOwWAmm+G/bxqH8QWqzCrAZuuyn1:IAD1SWHe/bgRY

  Score

  10^/10

  toxiceyediscoveryrattrojan

  • ToxicEye

    ToxicEye is a trojan written in C#.

    rattrojantoxiceye

  • Toxiceye family

    toxiceye

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2