d66577872ebf8ec7138102e46f35220fb823e502ece7a51b4989c961eb9549a3 | Triage

Submit
Reports

Overview

overview

7

Static

static

7

b9f5f9_d56...60.zip

windows10-2004-x64

1

TGN X/Cele...pt.bin

windows10-2004-x64

3

TGN X/DiscordRPC.pdb

windows10-2004-x64

3

TGN X/DiscordRPC.xml

windows10-2004-x64

1

TGN X/ICSh...it.xml

windows10-2004-x64

1

TGN X/Newt...on.xml

windows10-2004-x64

1

TGN X/TGN ...xe.xml

windows10-2004-x64

1

TGN X/TGN ... X.pdb

windows10-2004-x64

3

TGN X/TGN ... X.pdb

windows10-2004-x64

3

TGN X/Tools/Leeme.txt

windows10-2004-x64

1

TGN X/Tool...config

windows10-2004-x64

3

TGN X/Tool...ar.pdb

windows10-2004-x64

3

TGN X/WpfA...if.pdb

windows10-2004-x64

3

TGN X/WpfA...if.xml

windows10-2004-x64

1

TGN X/bin/...er.exe

windows10-2004-x64

3

TGN X/bin/...In.dll

windows10-2004-x64

1

TGN X/bin/...ct.exe

windows10-2004-x64

1

TGN X/bin/...pt.bin

windows10-2004-x64

3

TGN X/bin/...or.exe

windows10-2004-x64

1

TGN X/bin/..._4.dll

windows10-2004-x64

3

TGN X/bin/...er.exe

windows10-2004-x64

3

TGN X/bin/syntax.xml

windows10-2004-x64

1

TGN X/bin/ver/ver.txt

windows10-2004-x64

1

TGN X/cstrike.dll

windows10-2004-x64

1

TGN X/kern...ys.dll

windows10-2004-x64

3

TGN X/logs...sh.txt

windows10-2004-x64

1

TGN X/logs...sh.txt

windows10-2004-x64

1

TGN X/scri...pt.txt

windows10-2004-x64

1

TGN X/scri...nt.txt

windows10-2004-x64

1

TGN X/scri...ll.txt

windows10-2004-x64

1

TGN X/scri...SS.txt

windows10-2004-x64

1

TGN X/scri...eld.js

windows10-2004-x64

3

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06-10-2024 23:38

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

b9f5f9_d56493e9bc5a4096bb14c342eb1f0860.zip

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

TGN X/CeleryScript.bin

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

TGN X/DiscordRPC.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

TGN X/DiscordRPC.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

TGN X/ICSharpCode.AvalonEdit.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

TGN X/Newtonsoft.Json.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

TGN X/TGN EXPLOIT X.exe.xml

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

TGN X/TGN EXPLOIT X.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

TGN X/TGN EXPLOIT X_Secure/TGN EXPLOIT X.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

TGN X/Tools/Leeme.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

TGN X/Tools/pa q roblox me deje jugar.exe.config

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

TGN X/Tools/pa q roblox me deje jugar.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

TGN X/WpfAnimatedGif.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

TGN X/WpfAnimatedGif.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

TGN X/bin/268_kick_fixer.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

TGN X/bin/CeleryIn.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

TGN X/bin/CeleryInject.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

TGN X/bin/CeleryScript.bin

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

TGN X/bin/RbxInjector.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

TGN X/bin/XInput1_4.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

TGN X/bin/fpsunlocker.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral22

Sample

TGN X/bin/syntax.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

TGN X/bin/ver/ver.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

TGN X/cstrike.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

TGN X/kernel64.sys.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

TGN X/logs/18-03-2022_00-23-50_Crash.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

TGN X/logs/18-03-2022_00-28-19_Crash.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

TGN X/scripts/Arsenal Script.txt

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

TGN X/scripts/Breaking Point.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

TGN X/scripts/Demonfall.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

TGN X/scripts/FreaktureSS.txt

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

TGN X/scripts/Infinite Yield.js

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

TGN X/DiscordRPC.xml
Size

119KB
MD5

07dceb643b73dd3b700dcf82e1d6663a
SHA1

2d63c2b605485682d999935106ed6d2dbf674d3e
SHA256

24fc42b9582988ed65e5f003aa8e44358691a58f5db6a0e8821560c0fe9b2ee4
SHA512

cc4bc7113301c0dfca2660c00318a0a6603e85d5963440af764c9e0b37fadbcc9c249235ce3efd2a8090c9bb2c56509c097c0c833d4346fae68c72843feae112
SSDEEP

1536:+pttoB8797Mwsd1SzaOcTEBJ43MzLLWcdcKnNrBL9niwXS:+pttoB8797Mws/SzdcTE4gL9nG

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\TGN X\DiscordRPC.xml"
1⤵
PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2460-0-0x00007FFE235F0000-0x00007FFE23600000-memory.dmp

Filesize
64KB

Download
memory/2460-1-0x00007FFE6360D000-0x00007FFE6360E000-memory.dmp

Filesize
4KB

Download
memory/2460-2-0x00007FFE63570000-0x00007FFE63765000-memory.dmp

Filesize
2.0MB

Download
memory/2460-3-0x00007FFE63570000-0x00007FFE63765000-memory.dmp

Filesize
2.0MB

Download
memory/2460-4-0x00007FFE63570000-0x00007FFE63765000-memory.dmp

Filesize
2.0MB

Download

© 2018-2024

Terms | Privacy