General

  • Target

    https://gofile.io/d/tBP4oE

  • Sample

    250105-qxyt6axqdk

Malware Config

Extracted

Family

toxiceye

C2

https://api.telegram.org/bot7919388970:AAGC7fUBzVyMANzjN6bhRPjR0LNTw4C5Zlo/sendMessage?chat_id=8130842755

Targets

    • Target

      https://gofile.io/d/tBP4oE

    • ToxicEye

      ToxicEye is a trojan written in C#.

    • Toxiceye family

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks