d66577872ebf8ec7138102e46f35220fb823e502ece7a51b4989c961eb9549a3 | Triage

Submit
Reports

Overview

overview

7

Static

static

7

b9f5f9_d56...60.zip

windows10-2004-x64

1

TGN X/Cele...pt.bin

windows10-2004-x64

3

TGN X/DiscordRPC.pdb

windows10-2004-x64

3

TGN X/DiscordRPC.xml

windows10-2004-x64

1

TGN X/ICSh...it.xml

windows10-2004-x64

1

TGN X/Newt...on.xml

windows10-2004-x64

1

TGN X/TGN ...xe.xml

windows10-2004-x64

1

TGN X/TGN ... X.pdb

windows10-2004-x64

3

TGN X/TGN ... X.pdb

windows10-2004-x64

3

TGN X/Tools/Leeme.txt

windows10-2004-x64

1

TGN X/Tool...config

windows10-2004-x64

3

TGN X/Tool...ar.pdb

windows10-2004-x64

3

TGN X/WpfA...if.pdb

windows10-2004-x64

3

TGN X/WpfA...if.xml

windows10-2004-x64

1

TGN X/bin/...er.exe

windows10-2004-x64

3

TGN X/bin/...In.dll

windows10-2004-x64

1

TGN X/bin/...ct.exe

windows10-2004-x64

1

TGN X/bin/...pt.bin

windows10-2004-x64

3

TGN X/bin/...or.exe

windows10-2004-x64

1

TGN X/bin/..._4.dll

windows10-2004-x64

3

TGN X/bin/...er.exe

windows10-2004-x64

3

TGN X/bin/syntax.xml

windows10-2004-x64

1

TGN X/bin/ver/ver.txt

windows10-2004-x64

1

TGN X/cstrike.dll

windows10-2004-x64

1

TGN X/kern...ys.dll

windows10-2004-x64

3

TGN X/logs...sh.txt

windows10-2004-x64

1

TGN X/logs...sh.txt

windows10-2004-x64

1

TGN X/scri...pt.txt

windows10-2004-x64

1

TGN X/scri...nt.txt

windows10-2004-x64

1

TGN X/scri...ll.txt

windows10-2004-x64

1

TGN X/scri...SS.txt

windows10-2004-x64

1

TGN X/scri...eld.js

windows10-2004-x64

3

Analysis

max time kernel
93s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06-10-2024 23:38

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

b9f5f9_d56493e9bc5a4096bb14c342eb1f0860.zip

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

TGN X/CeleryScript.bin

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

TGN X/DiscordRPC.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

TGN X/DiscordRPC.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

TGN X/ICSharpCode.AvalonEdit.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

TGN X/Newtonsoft.Json.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

TGN X/TGN EXPLOIT X.exe.xml

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

TGN X/TGN EXPLOIT X.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

TGN X/TGN EXPLOIT X_Secure/TGN EXPLOIT X.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

TGN X/Tools/Leeme.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

TGN X/Tools/pa q roblox me deje jugar.exe.config

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

TGN X/Tools/pa q roblox me deje jugar.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

TGN X/WpfAnimatedGif.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

TGN X/WpfAnimatedGif.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

TGN X/bin/268_kick_fixer.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

TGN X/bin/CeleryIn.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

TGN X/bin/CeleryInject.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

TGN X/bin/CeleryScript.bin

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

TGN X/bin/RbxInjector.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

TGN X/bin/XInput1_4.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

TGN X/bin/fpsunlocker.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral22

Sample

TGN X/bin/syntax.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

TGN X/bin/ver/ver.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

TGN X/cstrike.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

TGN X/kernel64.sys.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

TGN X/logs/18-03-2022_00-23-50_Crash.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

TGN X/logs/18-03-2022_00-28-19_Crash.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

TGN X/scripts/Arsenal Script.txt

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

TGN X/scripts/Breaking Point.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

TGN X/scripts/Demonfall.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

TGN X/scripts/FreaktureSS.txt

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

TGN X/scripts/Infinite Yield.js

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

TGN X/WpfAnimatedGif.xml
Size

13KB
MD5

e92f6e210ec0abc4c8b52dcdae5066c6
SHA1

aea18e34af07c84cc5e63a078aab9dc70f8c9d8d
SHA256

2ae822e384385307e6001ce6ae56828aeea124faf663cb21d4aaac04734f6cb9
SHA512

7d13cfaa6cd111a16b75c6e669a2187050952306847d6863db43063652439dee4c1ec521cc086de2469c7df8df3bdc65fb7cef83948ffea36746da5176594696
SSDEEP

192:5KLS78cfyuHqoA43aNo6UjYgoc9QYXO6y76R6Uv6ucfZbu:OnI6z6BXXXXyekWcxbu

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\TGN X\WpfAnimatedGif.xml"
1⤵
PID:3208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3208-0-0x00007FF852510000-0x00007FF852520000-memory.dmp

Filesize
64KB

Download
memory/3208-1-0x00007FF89252D000-0x00007FF89252E000-memory.dmp

Filesize
4KB

Download
memory/3208-2-0x00007FF892490000-0x00007FF892685000-memory.dmp

Filesize
2.0MB

Download
memory/3208-3-0x00007FF892490000-0x00007FF892685000-memory.dmp

Filesize
2.0MB

Download
memory/3208-4-0x00007FF892490000-0x00007FF892685000-memory.dmp

Filesize
2.0MB

Download

© 2018-2024

Terms | Privacy