Overview

overview

7

Static

static

7

b9f5f9_d56...60.zip

windows10-2004-x64

1

TGN X/Cele...pt.bin

windows10-2004-x64

3

TGN X/DiscordRPC.pdb

windows10-2004-x64

3

TGN X/DiscordRPC.xml

windows10-2004-x64

1

TGN X/ICSh...it.xml

windows10-2004-x64

1

TGN X/Newt...on.xml

windows10-2004-x64

1

TGN X/TGN ...xe.xml

windows10-2004-x64

1

TGN X/TGN ... X.pdb

windows10-2004-x64

3

TGN X/TGN ... X.pdb

windows10-2004-x64

3

TGN X/Tools/Leeme.txt

windows10-2004-x64

1

TGN X/Tool...config

windows10-2004-x64

3

TGN X/Tool...ar.pdb

windows10-2004-x64

3

TGN X/WpfA...if.pdb

windows10-2004-x64

3

TGN X/WpfA...if.xml

windows10-2004-x64

1

TGN X/bin/...er.exe

windows10-2004-x64

3

TGN X/bin/...In.dll

windows10-2004-x64

1

TGN X/bin/...ct.exe

windows10-2004-x64

1

TGN X/bin/...pt.bin

windows10-2004-x64

3

TGN X/bin/...or.exe

windows10-2004-x64

1

TGN X/bin/..._4.dll

windows10-2004-x64

3

TGN X/bin/...er.exe

windows10-2004-x64

3

TGN X/bin/syntax.xml

windows10-2004-x64

1

TGN X/bin/ver/ver.txt

windows10-2004-x64

1

TGN X/cstrike.dll

windows10-2004-x64

1

TGN X/kern...ys.dll

windows10-2004-x64

3

TGN X/logs...sh.txt

windows10-2004-x64

1

TGN X/logs...sh.txt

windows10-2004-x64

1

TGN X/scri...pt.txt

windows10-2004-x64

1

TGN X/scri...nt.txt

windows10-2004-x64

1

TGN X/scri...ll.txt

windows10-2004-x64

1

TGN X/scri...SS.txt

windows10-2004-x64

1

TGN X/scri...eld.js

windows10-2004-x64

3

Analysis

  • max time kernel
    120s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-10-2024 23:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TGN X/Newtonsoft.Json.xml

  • Size

    693KB

  • MD5

    f414b3f68fe7c4f094b8fe8382f858c9

  • SHA1

    66ee1b3266fcedde433b392156ab4a24262b2f34

  • SHA256

    2d46b37b086d6848af5f021d2d7a40581ce78aadd8ee39d309aee4771a0eeccf

  • SHA512

    19b2feb40c2e9d4d20d9a21f88f6ecea773060c056b8cbbd21a6eec41486dc5fc101e6c31129b0d53466d04709bcd4ed777058ddfb02532242b43e253a7b24bd

  • SSDEEP

    6144:XqqUmk/RikeaG0rH3jGHdl0/InHHpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QA:DUq

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\TGN X\Newtonsoft.Json.xml"
    1⤵
      PID:2504

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2504-1-0x00007FFDF09ED000-0x00007FFDF09EE000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2504-0-0x00007FFDB09D0000-0x00007FFDB09E0000-memory.dmp

      Filesize

      64KB

      Download

    • memory/2504-2-0x00007FFDF0950000-0x00007FFDF0B45000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/2504-3-0x00007FFDF0950000-0x00007FFDF0B45000-memory.dmp

      Filesize

      2.0MB

      Download