Extracted

• • Target

    TelegramRAT.exe

  • Size

    111KB

  • MD5

    11ba79cad619fc51404eeeb0b2d63ef2

  • SHA1

    18646eff9e87752ad26ce6e892e0d321c1f53f5f

  • SHA256

    f1213ec3e74b0caf498b82acdbc5f91fbb673dd46ae225c567124e99d50dbbcf

  • SHA512

    67f6bda4940bc6f213c6a2e4f1a4d2acabbe54367a8461a3965974164572d765ffc9bdb61e3bf50a863534f4128217b7d4b36d5fcfdaf3d1a76b03fa30c5263c

  • SSDEEP

    1536:4+bCgwZPjcM91qQIwIe34xZxdyyKDWfebhDqI6SQWszCrAZuPuQDB:vbOZrc4+Zxj8bxqHSQWszCrAZuPxB

  Score

  10^/10

  toxiceyediscoveryrattrojan

  • ToxicEye

    ToxicEye is a trojan written in C#.

    rattrojantoxiceye

  • Toxiceye family

    toxiceye

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2