Overview

overview

10

Static

static

10

TGX V5 - V...GX.exe

windows10-2004-x64

10

TGX V5 - V...us.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TGX V5 - V1.0.0.zip

  • Size

    16.4MB

  • MD5

    74e28b1f66c7a40b5c8fe5ac61a64bfa

  • SHA1

    30d570889093a43bdfc011d4a278ef44bebf2470

  • SHA256

    ad48f6026a0aa44abc64ecc86f21493a75a8cfeca8320a6bd5e663b10e690200

  • SHA512

    4af63ceb943fdec908ba0c7eb408325e5995ca2d7e7e747a371fe96caf390d982b401d0a81eb68bf91e4b9e642f8dafc94ff60911423b9b97f1059219989b4d1

  • SSDEEP

    196608:wtxgkwnFOCp1hmCNJ0spm/7zDy5zluEiqcathSBKpJEYBI5E17l4oNpLm:tkwl1lJ3w/PDWbiR425M4mS

Score
10/10
macromacro_on_actiondiscordrat

Malware Config

Extracted

Family

discordrat

Attributes
  • discord_token

    MTE2ODM1MzgyNDc1OTYxOTcxNg.GuCBPV.iHyRCudnUUbr-EN6gXf0RcnWLVRwzYnh-dQ6Eo

  • server_id

    1168354244890480820

Signatures

  • Discordrat family
    discordrat
  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

    macromacro_on_action
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • TGX V5 - V1.0.0.zip
    .zip
  • TGX V5 - V1.0.0/DiscordRPC.dll
    .dll windows:6 windows x86

    6310e6aa09f46f952e994ef81548691a


    Headers

    Imports

    Exports

    Sections

  • TGX V5 - V1.0.0/ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • TGX V5 - V1.0.0/ICSharpCode.AvalonEdit.xml
    .xml
  • TGX V5 - V1.0.0/Newtonsoft.Json.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • TGX V5 - V1.0.0/Newtonsoft.Json.xml
    .xml
  • TGX V5 - V1.0.0/Scripts/Aimbot 3.0.txt
    .js
  • TGX V5 - V1.0.0/Scripts/Aimbot.txt
    .js
  • TGX V5 - V1.0.0/Scripts/Alt+Print.txt
  • TGX V5 - V1.0.0/Scripts/Anti AFK.txt
  • TGX V5 - V1.0.0/Scripts/Arsenal Kill All.txt
  • TGX V5 - V1.0.0/Scripts/Arsenal.txt
  • TGX V5 - V1.0.0/Scripts/ArsenalHitboxExtender.txt
  • TGX V5 - V1.0.0/Scripts/BRM5 Tp.txt
  • TGX V5 - V1.0.0/Scripts/Bacon Hub.txt
  • TGX V5 - V1.0.0/Scripts/BloxBurg.txt
  • TGX V5 - V1.0.0/Scripts/BloxHunt.txt
  • TGX V5 - V1.0.0/Scripts/Boys And Girls Hangout Gun.txt
  • TGX V5 - V1.0.0/Scripts/Btools.txt
  • TGX V5 - V1.0.0/Scripts/Build And Boat For Treasure.txt
  • TGX V5 - V1.0.0/Scripts/CBROKillAll.txt
  • TGX V5 - V1.0.0/Scripts/CC Aimbot V2.txt
  • TGX V5 - V1.0.0/Scripts/CC Aimbot.txt
    .js
  • TGX V5 - V1.0.0/Scripts/CMD-X.txt
  • TGX V5 - V1.0.0/Scripts/CTRL+Del.txt
  • TGX V5 - V1.0.0/Scripts/Click TP Tool.txt
  • TGX V5 - V1.0.0/Scripts/Coco Hub.txt
  • TGX V5 - V1.0.0/Scripts/Dark Hub.txt
  • TGX V5 - V1.0.0/Scripts/Dex Explorer v2.txt
    .js
  • TGX V5 - V1.0.0/Scripts/Dex Explorer.txt
    .js
  • TGX V5 - V1.0.0/Scripts/DexV1.txt
  • TGX V5 - V1.0.0/Scripts/DexV4.txt
  • TGX V5 - V1.0.0/Scripts/DivineSisters.txt
  • TGX V5 - V1.0.0/Scripts/EclipseMM2.txt
  • TGX V5 - V1.0.0/Scripts/Ez Hub.txt
  • TGX V5 - V1.0.0/Scripts/FPSBoost.txt
  • TGX V5 - V1.0.0/Scripts/Fathom Hub.txt
  • TGX V5 - V1.0.0/Scripts/Flee The Facility.txt
  • TGX V5 - V1.0.0/Scripts/Full Bright.txt
  • TGX V5 - V1.0.0/Scripts/Globals Script.txt
  • TGX V5 - V1.0.0/Scripts/Infinite Jump.txt
  • TGX V5 - V1.0.0/Scripts/Infinite Yield.txt
  • TGX V5 - V1.0.0/Scripts/Invisible Fling.txt
  • TGX V5 - V1.0.0/Scripts/Jailbreak.txt
  • TGX V5 - V1.0.0/Scripts/Kraken Hub.txt
  • TGX V5 - V1.0.0/Scripts/LucidityMM2.txt
  • TGX V5 - V1.0.0/Scripts/MM2.txt
  • TGX V5 - V1.0.0/Scripts/MM2Autofarm.txt
  • TGX V5 - V1.0.0/Scripts/Mad City 2.txt
    .js
  • TGX V5 - V1.0.0/Scripts/Mad City GUI.txt
  • TGX V5 - V1.0.0/Scripts/Mad City.txt
  • TGX V5 - V1.0.0/Scripts/Mad Emotes.txt
  • TGX V5 - V1.0.0/Scripts/MeepCity Plus.txt
  • TGX V5 - V1.0.0/Scripts/MheeHub.txt
  • TGX V5 - V1.0.0/Scripts/Murder Mystery 2.txt
  • TGX V5 - V1.0.0/Scripts/NoClip.txt
  • TGX V5 - V1.0.0/Scripts/NoClipKeybind.txt
  • TGX V5 - V1.0.0/Scripts/OpFinality.txt
  • TGX V5 - V1.0.0/Scripts/Ori Hub.txt
  • TGX V5 - V1.0.0/Scripts/Owl Hub.txt
  • TGX V5 - V1.0.0/Scripts/OxieHub.txt
  • TGX V5 - V1.0.0/Scripts/Phantom Forces.txt
  • TGX V5 - V1.0.0/Scripts/Prison Life [ Admin commands ].txt
  • TGX V5 - V1.0.0/Scripts/Prison Life.txt
  • TGX V5 - V1.0.0/Scripts/Prisonware.txt
  • TGX V5 - V1.0.0/Scripts/Remote Spy.txt
  • TGX V5 - V1.0.0/Scripts/Reviz Admin.txt
  • TGX V5 - V1.0.0/Scripts/SharkBite.txt
  • TGX V5 - V1.0.0/Scripts/Simple BloxBurg Auto Farm.txt
  • TGX V5 - V1.0.0/Scripts/TopKek V3.txt
    .js
  • TGX V5 - V1.0.0/Scripts/UnitClassifiedGUI.txt
  • TGX V5 - V1.0.0/Scripts/Walk On Walls.txt
  • TGX V5 - V1.0.0/Scripts/Walkspeed.txt
  • TGX V5 - V1.0.0/Scripts/ZyrexHub.txt
  • TGX V5 - V1.0.0/Scripts/[CTRL] Click TP.txt
  • TGX V5 - V1.0.0/Scripts/[E] Fly.txt
  • TGX V5 - V1.0.0/Scripts/[E] NoClip.txt
  • TGX V5 - V1.0.0/Scripts/oofNotoriety.txt
  • TGX V5 - V1.0.0/System.Management.Automation.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • TGX V5 - V1.0.0/TGX.exe
    .exe windows:4 windows x64


    Headers

    Sections

  • TGX V5 - V1.0.0/TGX.exe.config
  • TGX V5 - V1.0.0/TGX.pdb
  • TGX V5 - V1.0.0/Zeus.dll
    .dll windows:6 windows x86


    Headers

    Sections

  • TGX V5 - V1.0.0/bin/Zeus.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • TGX V5 - V1.0.0/bin/lua.xshd
    .xml