Extracted

• • Target

    250105-qykc6awjax_pw_infected.zip

  • Size

    51KB

  • MD5

    822b85e7f8c5092b6b2ce1291e8437e9

  • SHA1

    1fc87f5ff11583cd632d6f6e7a4008a3c8146881

  • SHA256

    c96283c6ac2a01c42c804a1bbc821b72a9ed505fc1943b3b1b00382aadfc2699

  • SHA512

    0f3fa4bb4cd5ca65396f5fa570831a70053ee59274880be7daa3730210cfe89d13188860c905f987ccb5e045778d10e01f2e5cd4469a40e6c54953ccb0e939b5

  • SSDEEP

    1536:CEoIN63tb/X5Ol8hiMGpunl+MTRHxa9keD4mhGo:TfN63FVbG8nlzTROLhf

  Score

  10^/10

  toxiceyediscoveryrattrojan

  • ToxicEye

    ToxicEye is a trojan written in C#.

    rattrojantoxiceye

  • Toxiceye family

    toxiceye

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Enumerates processes with tasklist

    discovery
  behavioral1