Extracted

• • Target

    37b140b412b4b35dd1569ec67fb624be586bc4ed0b18999584ce91dd0872e4c0

  • Size

    111KB

  • MD5

    98cd6339d0013464151fe4719924480e

  • SHA1

    6193255218effdef76de60ad5d98d76cca5c400f

  • SHA256

    37b140b412b4b35dd1569ec67fb624be586bc4ed0b18999584ce91dd0872e4c0

  • SHA512

    b06def8ffd3b2cac2c3beb3146f4306fbd9562a561cf62c26864db124a3a84499506b005344411597fe84b0291b7e2c0e1c45398cebd958d374e8fc45582b75d

  • SSDEEP

    3072:1bs2teAmbPICnM4bxqHaQ50ICrAZ5Y4I:HteAmbPIV4bg9

  Score

  10^/10

  toxiceyediscoveryrattrojan

  • ToxicEye

    ToxicEye is a trojan written in C#.

    rattrojantoxiceye

  • Toxiceye family

    toxiceye

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2