General
- Target TcpEye.exe
- Size 1.4MB
- Sample260910-shgcnstvfz
- SHA256 21e1046ff6989cad67d9d3bfc49011f63d81f8c4c89d54ae318a110ec14a9a2e
- MD5 219c77d51c1887254bf9d2e5663b1817
- SHA1 bd3f3e3ccddca7ef029048dde9bf87d783a021cf
- SHA512 447cee5ba69d7132e77fad235f02244f70ef6d057d86ecf76eca572d1d72ced5d1459b89d1b683c3ce689de34da1bfc83b0e4fa738190d5f6717ff3aac2e282c
- SSDEEP 24576:L20kG3HzuXRQAkhUEkbjlA1WScxlk1U8VEQMnQm/BrUU/rpI2anlMvgY7rmvZf5A:L2U3TuaAkhURHlW8YUlptBrUI9gnlMIE
- TLSH T10765331A3671D178D39318324E28D411853FFEF76836A489B8FF4FCD6B27980A951BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
TcpEye.exe
Resource
win10v2004-20260513-en
13 signatures
60 seconds
Malware Config
Targets
-
- Target TcpEye.exe
- Size 1.4MB
- SHA256 21e1046ff6989cad67d9d3bfc49011f63d81f8c4c89d54ae318a110ec14a9a2e
- MD5 219c77d51c1887254bf9d2e5663b1817
- SHA1 bd3f3e3ccddca7ef029048dde9bf87d783a021cf
- SHA512 447cee5ba69d7132e77fad235f02244f70ef6d057d86ecf76eca572d1d72ced5d1459b89d1b683c3ce689de34da1bfc83b0e4fa738190d5f6717ff3aac2e282c
- SSDEEP 24576:L20kG3HzuXRQAkhUEkbjlA1WScxlk1U8VEQMnQm/BrUU/rpI2anlMvgY7rmvZf5A:L2U3TuaAkhURHlW8YUlptBrUI9gnlMIE
- TLSH T10765331A3671D178D39318324E28D411853FFEF76836A489B8FF4FCD6B27980A951BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.