Overview

overview

10

Static

static

10

GameTEST.exe

windows10-2004-x64

GameTEST.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    GameTEST.exe
  • Size 535KB
  • Sample260702-cl8nbsa14x
  • SHA256 25523ef0ec3344b6908740ee6153d9d2b3fd2b187419912431eb7ab0b514ab8d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
toxiceyedefense_evasiondiscoveryexecutionpersistencerattrojan

Malware Config

Extracted

Family

  • toxiceye

C2

  • https://api.telegram.org/bot8786761164:AAFbOXS02dtm7V0OgHHEBvX4Wlm1_QyIAKw/sendMessage?chat_id=8699941316

Targets

    • Target
      GameTEST.exe
    • Size 535KB
    • SHA256 25523ef0ec3344b6908740ee6153d9d2b3fd2b187419912431eb7ab0b514ab8d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryexecutiontoxiceyepersistencerattrojan

    • Family: ToxicEye

      ToxicEye is a trojan written in C#.

      rattrojantoxiceye

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks