d66577872ebf8ec7138102e46f35220fb823e502ece7a51b4989c961eb9549a3 | Triage

Submit
Reports

Overview

overview

7

Static

static

7

b9f5f9_d56...60.zip

windows10-2004-x64

1

TGN X/Cele...pt.bin

windows10-2004-x64

3

TGN X/DiscordRPC.pdb

windows10-2004-x64

3

TGN X/DiscordRPC.xml

windows10-2004-x64

1

TGN X/ICSh...it.xml

windows10-2004-x64

1

TGN X/Newt...on.xml

windows10-2004-x64

1

TGN X/TGN ...xe.xml

windows10-2004-x64

1

TGN X/TGN ... X.pdb

windows10-2004-x64

3

TGN X/TGN ... X.pdb

windows10-2004-x64

3

TGN X/Tools/Leeme.txt

windows10-2004-x64

1

TGN X/Tool...config

windows10-2004-x64

3

TGN X/Tool...ar.pdb

windows10-2004-x64

3

TGN X/WpfA...if.pdb

windows10-2004-x64

3

TGN X/WpfA...if.xml

windows10-2004-x64

1

TGN X/bin/...er.exe

windows10-2004-x64

3

TGN X/bin/...In.dll

windows10-2004-x64

1

TGN X/bin/...ct.exe

windows10-2004-x64

1

TGN X/bin/...pt.bin

windows10-2004-x64

3

TGN X/bin/...or.exe

windows10-2004-x64

1

TGN X/bin/..._4.dll

windows10-2004-x64

3

TGN X/bin/...er.exe

windows10-2004-x64

3

TGN X/bin/syntax.xml

windows10-2004-x64

1

TGN X/bin/ver/ver.txt

windows10-2004-x64

1

TGN X/cstrike.dll

windows10-2004-x64

1

TGN X/kern...ys.dll

windows10-2004-x64

3

TGN X/logs...sh.txt

windows10-2004-x64

1

TGN X/logs...sh.txt

windows10-2004-x64

1

TGN X/scri...pt.txt

windows10-2004-x64

1

TGN X/scri...nt.txt

windows10-2004-x64

1

TGN X/scri...ll.txt

windows10-2004-x64

1

TGN X/scri...SS.txt

windows10-2004-x64

1

TGN X/scri...eld.js

windows10-2004-x64

3

Analysis

max time kernel
92s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06-10-2024 23:38

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

b9f5f9_d56493e9bc5a4096bb14c342eb1f0860.zip

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

TGN X/CeleryScript.bin

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

TGN X/DiscordRPC.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

TGN X/DiscordRPC.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

TGN X/ICSharpCode.AvalonEdit.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

TGN X/Newtonsoft.Json.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

TGN X/TGN EXPLOIT X.exe.xml

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

TGN X/TGN EXPLOIT X.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

TGN X/TGN EXPLOIT X_Secure/TGN EXPLOIT X.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

TGN X/Tools/Leeme.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

TGN X/Tools/pa q roblox me deje jugar.exe.config

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

TGN X/Tools/pa q roblox me deje jugar.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

TGN X/WpfAnimatedGif.pdb

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

TGN X/WpfAnimatedGif.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

TGN X/bin/268_kick_fixer.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

TGN X/bin/CeleryIn.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

TGN X/bin/CeleryInject.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

TGN X/bin/CeleryScript.bin

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

TGN X/bin/RbxInjector.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

TGN X/bin/XInput1_4.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

TGN X/bin/fpsunlocker.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral22

Sample

TGN X/bin/syntax.xml

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

TGN X/bin/ver/ver.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

TGN X/cstrike.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

TGN X/kernel64.sys.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

TGN X/logs/18-03-2022_00-23-50_Crash.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

TGN X/logs/18-03-2022_00-28-19_Crash.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

TGN X/scripts/Arsenal Script.txt

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

TGN X/scripts/Breaking Point.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

TGN X/scripts/Demonfall.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

TGN X/scripts/FreaktureSS.txt

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

TGN X/scripts/Infinite Yield.js

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

TGN X/ICSharpCode.AvalonEdit.xml
Size

582KB
MD5

5bd494ea6ab9ed3a0dd5f4736a6c1f8d
SHA1

9ffb4fa061171eeba0714cad028c4655aa2d241c
SHA256

a8de4e43ec6747781a7e01a7e5d51c92cffff32879e6bc3795c75c9ac90fd9cf
SHA512

60eb5a1a8b253e680bfe4340c2ef4810ef3089124959804436a1a910a8750208972623923e7613a03a41db0d08a93c568c7b424a5406bb5ea40453f2c617a71c
SSDEEP

6144:sFilxsTCj3BkjMG8AitANoPNzLINIFlhgTS9ycdxyhxYYbqEt:9g2Yc4

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\TGN X\ICSharpCode.AvalonEdit.xml"
1⤵
PID:552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/552-0-0x00007FFE7B8F0000-0x00007FFE7B900000-memory.dmp

Filesize
64KB

Download
memory/552-1-0x00007FFEBB90D000-0x00007FFEBB90E000-memory.dmp

Filesize
4KB

Download
memory/552-3-0x00007FFEBB870000-0x00007FFEBBA65000-memory.dmp

Filesize
2.0MB

Download
memory/552-2-0x00007FFEBB870000-0x00007FFEBBA65000-memory.dmp

Filesize
2.0MB

Download
memory/552-4-0x00007FFEBB870000-0x00007FFEBBA65000-memory.dmp

Filesize
2.0MB

Download

© 2018-2024

Terms | Privacy