Extracted

• • Target

    ChromeUpdate.exe

  • Size

    111KB

  • MD5

    5dce69d8563e7d4a8f82e5be8b2f1a62

  • SHA1

    1458edbb836f33749682b557ab8095afd3bcc0cf

  • SHA256

    ad14b62650cdbe1118aa5a601682b4d8bea1a432db985fb3e96de1c9fc1e5e1c

  • SHA512

    e3845e4ab3e0f6df8075850c0c8a4c97caaf71d1bdc969d82749f3a567818d854fb4bcce9f75693eb8cd8e0280334a7c2f0da81e6f5756ca8e1cff7e55ce474f

  • SSDEEP

    1536:7+bQeCwEXM91qQIwiG39Wr1m8ndbhHqI6JQWqzCrAZuulvsp:Cb1ClXbG30ro8dbZqHJQWqzCrAZuu+p

  Score

  10^/10

  toxiceyediscoveryrattrojan

  • ToxicEye

    ToxicEye is a trojan written in C#.

    rattrojantoxiceye

  • Toxiceye family

    toxiceye

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2