Overview

overview

10

Static

static

10

Chrome Update.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Chrome Update.exe

  • Size

    111KB

  • Sample

    250105-qbqawsxkdl

  • MD5

    05112dda1331e95ffb3f49199f30e3c4

  • SHA1

    5719297583edf0d07cadf0f6e27a6476bde5249b

  • SHA256

    16424b4f2ad3135749aca508caa528264bd42a7fcdcfe44dc538198dd29aa75e

  • SHA512

    a39241b8c2c4176f550d0151c403f8b350eba31078bc697af015dd93a9cc94b12dcbbde74e357a8936bc93fea59a020c18081bfaef3419acbb3ef380c9b64ef0

  • SSDEEP

    3072:bbKsnwo0g30ro8NbZqH4QWqzCrAZuuBUp:ysnwo4rvbM1

Score
10/10
toxiceyediscoveryrattrojan

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot7742822790:AAHkizf3bilCkIqp8NNVcbWObKSVKo8Xifo/sendMessage?chat_id=7053620590

Targets

    • Target

      Chrome Update.exe

    • Size

      111KB

    • MD5

      05112dda1331e95ffb3f49199f30e3c4

    • SHA1

      5719297583edf0d07cadf0f6e27a6476bde5249b

    • SHA256

      16424b4f2ad3135749aca508caa528264bd42a7fcdcfe44dc538198dd29aa75e

    • SHA512

      a39241b8c2c4176f550d0151c403f8b350eba31078bc697af015dd93a9cc94b12dcbbde74e357a8936bc93fea59a020c18081bfaef3419acbb3ef380c9b64ef0

    • SSDEEP

      3072:bbKsnwo0g30ro8NbZqH4QWqzCrAZuuBUp:ysnwo4rvbM1

    Score
    10/10
    toxiceyediscoveryrattrojan

    • ToxicEye

      ToxicEye is a trojan written in C#.

      rattrojantoxiceye

    • Toxiceye family

      toxiceye

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates processes with tasklist

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks