General

  • Target

    Chrome Update.exe

  • Size

    111KB

  • Sample

    250105-qbqawsxkdl

  • MD5

    05112dda1331e95ffb3f49199f30e3c4

  • SHA1

    5719297583edf0d07cadf0f6e27a6476bde5249b

  • SHA256

    16424b4f2ad3135749aca508caa528264bd42a7fcdcfe44dc538198dd29aa75e

  • SHA512

    a39241b8c2c4176f550d0151c403f8b350eba31078bc697af015dd93a9cc94b12dcbbde74e357a8936bc93fea59a020c18081bfaef3419acbb3ef380c9b64ef0

  • SSDEEP

    3072:bbKsnwo0g30ro8NbZqH4QWqzCrAZuuBUp:ysnwo4rvbM1

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot7742822790:AAHkizf3bilCkIqp8NNVcbWObKSVKo8Xifo/sendMessage?chat_id=7053620590

Targets

    • Target

      Chrome Update.exe

    • Size

      111KB

    • MD5

      05112dda1331e95ffb3f49199f30e3c4

    • SHA1

      5719297583edf0d07cadf0f6e27a6476bde5249b

    • SHA256

      16424b4f2ad3135749aca508caa528264bd42a7fcdcfe44dc538198dd29aa75e

    • SHA512

      a39241b8c2c4176f550d0151c403f8b350eba31078bc697af015dd93a9cc94b12dcbbde74e357a8936bc93fea59a020c18081bfaef3419acbb3ef380c9b64ef0

    • SSDEEP

      3072:bbKsnwo0g30ro8NbZqH4QWqzCrAZuuBUp:ysnwo4rvbM1

    • ToxicEye

      ToxicEye is a trojan written in C#.

    • Toxiceye family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.