Extracted

• • Target

    77d5c3a637603fef747234b246f206cb3ac8200bc018a4d78d437fe80b0d071f

  • Size

    9.1MB

  • MD5

    8ea30acc005292f38b5b3886f244b2a9

  • SHA1

    feaaeef18b6d2a5a2b974b5a32d970e8d9356321

  • SHA256

    77d5c3a637603fef747234b246f206cb3ac8200bc018a4d78d437fe80b0d071f

  • SHA512

    77910c47ac6c57982db81da036a0c78ca43792edb7f91d2e07903ab4a833c528f9c13100745d801c06b5649672e00bfda5475bc25c17fb2d7eeac0de9981697f

  • SSDEEP

    196608:UxB14xuTMS+BPC2cZ07LqyUl7m6/ZTYtSx0USapM7KxBx:YL4QTz+YZ0/qXjpYteX

  Score

  10^/10

  tofseediscoverytrojan

  • Tofsee

    Backdoor/botnet which carries out malicious activities based on commands from a C2 server.

    trojantofsee

  • Tofsee family

    tofsee

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1