C:\Users\kanye\AppData\Local\Temp\Rar$DRa15520.4789.rartemp\ToxicEye-master\TelegramRAT\TelegramRAT\obj\Release\TelegramRAT.pdb
General
-
Target
TelegramRAT.exe
-
Size
111KB
-
MD5
fba83f24aac967fffc57baf01c095893
-
SHA1
8cdab10a3facee2d4f758911c3f2e00bb91281b3
-
SHA256
5d8daed4827846f5c371eb9d958d4b478fa357a495a1cb68df9eecbf40142281
-
SHA512
22ea406650183dfdd3f27ae9f1461550c3c9de2e62507f0c1af5b783e776df40ed2e59f7d7f009dc8f23b4b1705d7f909c2681501785ef0ec14ba2aa60ca51dc
-
SSDEEP
1536:I+bUlO0pkM91qQIw8yr9xZxdyyKDWfybhDqI6bQWCzCrAZuqUqDQ:fbWOYkDyrrZxjQbxqHbQWCzCrAZuqBQ
Score
10/10
Malware Config
Extracted
Family
toxiceye
C2
https://api.telegram.org/bot7709903928:AAH-JjBArW0_8_MX2hpJCxd-s2x1v94lP2Y/sendMessage?chat_id=5101964078
Signatures
-
Toxiceye family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
TelegramRAT.exe
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections