General
-
Target
ChekMine.exe
-
Size
111KB
-
Sample
250304-ga87yasmt7
-
MD5
d0a8826179377706d50d8511b5270202
-
SHA1
a164924fdcaaa9a1c58e8ae4365f06b4da3e6ce3
-
SHA256
0fd3be20b5b0e61fc687de84a79cce38a0c80eebfdf42ae963eedbd63ac6eacc
-
SHA512
2a0dae6e457e19bec6e9e554f33294417d73f98d35643a04160f1b02f14be45b9004082e7dc076ed9af7b1690ef91cf5bcbb92a8a8a9446d4e690f119192b767
-
SSDEEP
3072:Bb4MOYUuQaS+T8sv8X31OjqOjNhOYpbxqH8QWnzCrAZuGYW:sYUuQaS+T8sv8X31OXNtbg2
Behavioral task
behavioral1
Sample
ChekMine.exe
Resource
win7-20250207-en
Malware Config
Extracted
toxiceye
https://api.telegram.org/bot1422952298:AAEUK5QmhKaWUtETf1GIcyg7deR8JXsbh2c/sendMessage?chat_id=1189853645
Targets
-
-
Target
ChekMine.exe
-
Size
111KB
-
MD5
d0a8826179377706d50d8511b5270202
-
SHA1
a164924fdcaaa9a1c58e8ae4365f06b4da3e6ce3
-
SHA256
0fd3be20b5b0e61fc687de84a79cce38a0c80eebfdf42ae963eedbd63ac6eacc
-
SHA512
2a0dae6e457e19bec6e9e554f33294417d73f98d35643a04160f1b02f14be45b9004082e7dc076ed9af7b1690ef91cf5bcbb92a8a8a9446d4e690f119192b767
-
SSDEEP
3072:Bb4MOYUuQaS+T8sv8X31OjqOjNhOYpbxqH8QWnzCrAZuGYW:sYUuQaS+T8sv8X31OXNtbg2
-
Toxiceye family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates processes with tasklist
-