Overview

overview

10

Static

static

3

CyberEye.C...er.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    CyberEye.Builder.v1.0.3.HeartBeat.zip
  • Size 487KB
  • Sample260727-b4emjafq2t
  • SHA256 62f8c9147c1b4972de47ff030135fb3d0d23d07bcbf1fea656e2792702627940
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
toxiceyedefense_evasiondiscoveryexecutionpersistencerattrojan

Malware Config

Targets

    • Target
      CyberEye.Client.Builder.exe
    • Size 367KB
    • SHA256 68863e8ee01a59f091e97f8b45f0be52c20b69bf51748ed731d12c75b855230b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryexecutiontoxiceyepersistencerattrojan

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • Family: ToxicEye

      ToxicEye is a trojan written in C#.

      rattrojantoxiceye

    • Executes dropped EXE

    • Enumerates processes with tasklist

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks