Overview
overview
7Static
static
3tg-proxy-m...ws.exe
windows10-2004-x64
7tg-proxy-m...ws.exe
windows11-ltsc_2024-x64
7tg-proxy-m...nux.py
windows10-2004-x64
3tg-proxy-m...nux.py
windows11-ltsc_2024-x64
3tg-proxy-m...cos.py
windows10-2004-x64
3tg-proxy-m...cos.py
windows11-ltsc_2024-x64
3tg-proxy-m...t__.py
windows10-2004-x64
3tg-proxy-m...t__.py
windows11-ltsc_2024-x64
3tg-proxy-m...aes.py
windows10-2004-x64
3tg-proxy-m...aes.py
windows11-ltsc_2024-x64
3tg-proxy-m...cer.py
windows10-2004-x64
3tg-proxy-m...cer.py
windows11-ltsc_2024-x64
3tg-proxy-m...dge.py
windows10-2004-x64
3tg-proxy-m...dge.py
windows11-ltsc_2024-x64
3tg-proxy-m...fig.py
windows10-2004-x64
3tg-proxy-m...fig.py
windows11-ltsc_2024-x64
3tg-proxy-m...tls.py
windows10-2004-x64
3tg-proxy-m...tls.py
windows11-ltsc_2024-x64
3tg-proxy-m...ool.py
windows10-2004-x64
3tg-proxy-m...ool.py
windows11-ltsc_2024-x64
3tg-proxy-m...ket.py
windows10-2004-x64
3tg-proxy-m...ket.py
windows11-ltsc_2024-x64
3tg-proxy-m...ats.py
windows10-2004-x64
3tg-proxy-m...ats.py
windows11-ltsc_2024-x64
3tg-proxy-m...oxy.py
windows10-2004-x64
3tg-proxy-m...oxy.py
windows11-ltsc_2024-x64
3tg-proxy-m...ils.py
windows10-2004-x64
3tg-proxy-m...ils.py
windows11-ltsc_2024-x64
3tg-proxy-m...t__.py
windows10-2004-x64
3tg-proxy-m...t__.py
windows11-ltsc_2024-x64
3tg-proxy-m...eme.py
windows10-2004-x64
3tg-proxy-m...eme.py
windows11-ltsc_2024-x64
3General
- Target tg proxy.zip_pass_123.zip
- Size 23.4MB
- Sample260804-rsagfasfld
- SHA256 7ffb454cecd4200fd980d33d4ad803851e73bd0affc5c6fa0fe897ad186cc841
- MD5 804b1f59166a32194249c6aa75b488ad
- SHA1 4894d83c8f6a2039fe3ce8e5133aa26efc8dcd83
- SHA512 406f6007ab43bce528a758eefbcfd36db403e0e67500ebb82068059943b49992d9a6a14342d00b7d4ebbf7aec80900eb4991e3169c9af18369964f8d1c1ff267
- SSDEEP 393216:6wJzrHerROn8e/MDbAChexHBpMG/mP+Ts5RkCGnEJaIW9u/m5hffut5xbQ5KRkRJ:FJ/eVaEvAPU9P+InGEJc9uO5hHU5iQRg
- TLSH T1BC3733F9BA6C68AC022AD435167D126172C83537893C426589B5A93D0AF78C3F6D7CCF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
tg-proxy-main/TgWsProxy_windows.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
tg-proxy-main/TgWsProxy_windows.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
tg-proxy-main/linux.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
tg-proxy-main/linux.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
tg-proxy-main/macos.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
tg-proxy-main/macos.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
tg-proxy-main/proxy/__init__.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
tg-proxy-main/proxy/__init__.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
tg-proxy-main/proxy/_aes.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
tg-proxy-main/proxy/_aes.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
tg-proxy-main/proxy/balancer.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
tg-proxy-main/proxy/balancer.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
tg-proxy-main/proxy/bridge.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
tg-proxy-main/proxy/bridge.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
tg-proxy-main/proxy/config.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
tg-proxy-main/proxy/config.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
tg-proxy-main/proxy/fake_tls.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
tg-proxy-main/proxy/fake_tls.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
tg-proxy-main/proxy/pool.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
tg-proxy-main/proxy/pool.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
tg-proxy-main/proxy/raw_websocket.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
tg-proxy-main/proxy/raw_websocket.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
tg-proxy-main/proxy/stats.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
tg-proxy-main/proxy/stats.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
tg-proxy-main/proxy/tg_ws_proxy.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
tg-proxy-main/proxy/tg_ws_proxy.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
tg-proxy-main/proxy/utils.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
tg-proxy-main/proxy/utils.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
tg-proxy-main/ui/__init__.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
tg-proxy-main/ui/__init__.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
tg-proxy-main/ui/ctk_theme.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
tg-proxy-main/ui/ctk_theme.py
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target tg-proxy-main/TgWsProxy_windows.exe
- Size 23.6MB
- SHA256 f06956c3dce3b174472c1eff5d7039e845d4b1a67389c0eb148dfe831dc80b4a
- MD5 5b5891cb0635669cabb1c9df466c1809
- SHA1 85757c370369a0e87b116633f2747b73b06006ef
- SHA512 901f8edfa43245ac15d409a132b28f3da925510f349636f630c435284ea860924ada75308b4ea6fdc3ff223b53aa853d4d00ff664aeed73d6b27115f4bd82152
- SSDEEP 393216:G/TSGTWN26WUBnwk3o9jnW8kLtjYFxVHFFm0KfuC1hHTodRGkXT9v9AaxIhfnWkN:q7426WUBnULW8kxYFrHFFm09Cv0LhXdK
- TLSH T18B47339A37D44CA4EA5E92B482934685E36570930370D7D75FF98DA23DA30F4EE3039A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target tg-proxy-main/linux.py
- Size 9KB
- SHA256 2cee311cf6acc78a0d0084f73e9ea5ca2d78582e601e72712d9d43b3782e7da4
- MD5 0b75ddfcc7a7997a5a49dfdf6d0c2456
- SHA1 a1f337107d12b194971191f852d7d4010894d54d
- SHA512 06bb27da5db57cb7b4916bc8117f6c07dec5d81c62cc2d494c8324041cb929a524c8a006ec2e9989618d42890ab667ac2a0a69814f43d5599202d58f18fa173f
- SSDEEP 192:BxBTXuDZIOjor1thajT2vUOBpL+5HgzHjVM5atch7i:Bf2GOExqjTtODL+5Hg72Gch2
- TLSH T15312A3139E2D242387A3CC6AC9B791265319699B4D052524BEECA3B81FDF432C5F3298
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-proxy-main/macos.py
- Size 20KB
- SHA256 31553cbc6305ed2d15375e5c8237bd5f5f02d7ccd3546c71b4d58278a7a3521f
- MD5 61e23fac3d0e7e759a05a4e9f9f4b7af
- SHA1 fb01e31191d0bfe38f3d840688e57d7113927e15
- SHA512 0519c520f608367073ca79fd3d58e76871bc99b6129c58b1f7f6f2344b6559854b82c5f7590f7f55ffc09d7a08b688ed55ec7504f909f662b7f8d2f2f9b383a0
- SSDEEP 384:BWrwi4MT7Z7H19Ved3QWL+bV/e7TStww4kjocOA23+sahz:BSJ7Z7kd3QWyBMStx4kjovA23+sahz
- TLSH T1DCA2E801DD6E98A7C3A7989D5889D1101311AD9B2E062A387CFCB37D2FDD435C5B1AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-proxy-main/proxy/__init__.py
- Size 272B
- SHA256 563c515f86bff3a774d9e4f5195754d9792d1d97fa1cbba40cc88c8819fb5f69
- MD5 3f7b15a5a67231b100644faf397747cd
- SHA1 af77bdd4f5e2caf1a4f5acc375aaf259af38e147
- SHA512 0f0b0170d8f436007b1b551600a333a7e26f7e211630fd49cc599c94bd42f6208f1509936625c938a9806a14c1e7c78df24d7990def3082c112d6e4762005e89
- TLSH T1ECD0C232C4241C7302F9D98AF4204122BF30CA7483C8041C07502C38AE0CE529CE1008
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target tg-proxy-main/proxy/_aes.py
- Size 4KB
- SHA256 5b07f23c1d65140fb933e2c31d42817012d2ff4b60664f69146fe2554d54d528
- MD5 7ca090bf8691cd097b9d653246ceefe0
- SHA1 e9cce3e768ad8c337f4fc3fe50da803f69353fad
- SHA512 577e821eaa877ae56d29a7bc17a360b11d2a589100c2b3e10680d34b62bf8a4ad04348895e95a186014b5d68ef10e93f14e51d789bd51222897d237f06050c52
- SSDEEP 96:e6eA2lgi4SUswZaGaVXQY814G0/5cHssXUt:e6CpwZaGaVXsO/CMtt
- TLSH T1859120510E6CF563A3C7A8266973C8522B24A42714687E3C37FC84B56FD703C8579BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-proxy-main/proxy/balancer.py
- Size 1KB
- SHA256 3d4330488b968e146286b14790c0814eae3efe5d0f26206572369ca6368eed24
- MD5 cb66bbb651d8cbbf17296c453a153f62
- SHA1 295f68f10cbc8e19ffdb8d9617854792c2c0aaa3
- SHA512 ea1652ec6138bf6730152cb19baca31a4f41cc04e211de6910b328132103d896c6cbbc1e917f783376cb9a91f045336f517ed0b7e60be595725360e33a0eb89a
- TLSH T1A4219B390973A415F3F3E53C74E1B41BA62AFAC3B65805117CAE1028AF62474C9F4EAD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target tg-proxy-main/proxy/bridge.py
- Size 13KB
- SHA256 6ee057693d21a386d35431afc642948d4d6cf12b7edb7a5205c7e023215f6a38
- MD5 6527f7fa831aad919b0dca7533c64319
- SHA1 eaa7ba2c9839ade895a2e0433563c103e6a5b694
- SHA512 f402bff6caf4dd5d1dd9cecac9fe79f1e72c7bb1c0442ba58e82542bc571127cd4105367f2164effd5d2553368a693373182caabf28e6bce9988d3a7a5e0baa7
- SSDEEP 192:6Ci2amUB8xlprymcrrGW6PEv3TImz12FBPOksDPuFAVeA5zo9O:6t2U8Jymeb6cv3TImZ2F4LDDH
- TLSH T16F525101D5272921C3E3CD6E5463F1136239BD0B691D1C39BEEC82586F8B539DAF1EA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-proxy-main/proxy/config.py
- Size 5KB
- SHA256 df667bf04928e274cfd6b202558ed4f8408bd5639832e5ec2f70a27b6f05fe40
- MD5 f5c5e0a295130d526ab2caa4cfadc14b
- SHA1 304c6ebee26d910bee38057f42a97576b9ee9e2f
- SHA512 07d00ef4ddcf2b0c819a8b0cc4f3a8c97e222ecf8950de57e0cf7e4a9c0b6022737e89038231afd0a1681ac4c2c2ec0e226394f2ca85ef416c24b4703415eac1
- SSDEEP 96:IsQNJI1iLM8Gz/TFMJHJSDVRj0rDMjt4ZTUkmLiSxDKOYvaN1EoYjD3MeW98qvz:raJT48OKpSDVyrD+GZTUk7w4vsEDxKLz
- TLSH T1FAC1A871E8371451DBE3C57EE809F2116226F8135900583CBEECA7646F8A678E7F46AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-proxy-main/proxy/fake_tls.py
- Size 7KB
- SHA256 ce4ce10990117f96522558bc38f2798630b4b736854fd0bf738ba886332b9cb9
- MD5 e626990bcb64ea5947101329d7283600
- SHA1 b5c974294bed27d7146239d440649c33a152a4f7
- SHA512 f8cf3cdb33c0bc937c3e8f0f2d886d5b05c52e5f4b4beddc07d51a5b08aa45fb61c10cd0b754615a3284364330c494960a6daa830c804d88b746f4ea2bc9ae6b
- SSDEEP 192:oZwZZWDTIu/A37j17UMpIdaqICF8EevRpBdyMQJR:o2eD9o37pbpIDICFDTJR
- TLSH T145E153E5686AE990D393E87588A3F802231DF807590D133C766C87559F5D229F3B5EF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-proxy-main/proxy/pool.py
- Size 6KB
- SHA256 cf63fa4f6520f62207021a29077f05a06482759483c9f7320a868041a3187729
- MD5 e651f5fffd6cbbc6371364e50629a417
- SHA1 909cfc2235e8f92e74dbf14cc39fecf7d236e8c0
- SHA512 721eb6440b6d5ec9e0bfeb8dbc14f46c282cfba88c34b1127c1955310dcafabab9d5a311ee52ffe43df2cbdfe27f63fa9968e5404e3f08701262c93029ce4f7c
- SSDEEP 96:y0FjrHFee4sgggK4gFOuyivo5lN0jqp4GnedSNsgOgsagVOxMiDanACjG:r3HFYsb145PmqOPGnpsj/ab277G
- TLSH T106E13552C4271961D6B3CA6B9493B303B62AAD1B1E090239B9FC53A45F9A130C6E9C98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-proxy-main/proxy/raw_websocket.py
- Size 7KB
- SHA256 3595eef50cf82d9afd3792768637130ba8ddc672d5f8c9de90c0f870fa7697ae
- MD5 c8bc65e1487fe300deb27a6cac3623ad
- SHA1 93853d61b24310229c8e7f7ea4c9e0fda325d182
- SHA512 1211c34e5321e4a0f6ca4ebcc44ea333d87f09c5fe8b657c20fd5a7aa4324de9e06040680378008aa58b1a62103b8e754cc52d3b2b299f568fcc81750c10e800
- SSDEEP 96:Vznyvy6/5u3Td/3eViCjmvjDQltI7kqL86DtvuvrOJPe2VQ+:VzyHxrplSTv2SJm2F
- TLSH T1F5F16111C8766B9093D3C46C88B1E603776EBD17A60D0068BAFC9B18AF9656CC0E1DF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-proxy-main/proxy/stats.py
- Size 1KB
- SHA256 7f71554e3485a37f9bdc61df4ee5b8faec47d562f2b611f3ea0a59fd3dca34df
- MD5 7ceb90d7870976653622d2cd57d0592e
- SHA1 bd5a314c99b7444e48683b2855cb6c50793a735e
- SHA512 8e5830ba9e71b5af2d7d40a5cbe946f9d5331d24d226d3a2c1ccad4110500bdabdd095cb9cbbd6e141ad41b66bce8e562e4e5232d23948d69074b7c0a45a23b7
- TLSH T16B31CB0055267A824E17981EA08330571B3ECE470E4E096A71BCB2E29FF975660D6EDF
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target tg-proxy-main/proxy/tg_ws_proxy.py
- Size 23KB
- SHA256 2f9d39bc91aae4912acab778ae6acb09fc18a68b6e06385a3738f8b23c3659e3
- MD5 4df6081f8f7830c7369adf3580766fa5
- SHA1 7dbe0905ab15e440f34205760d749aa3f6e3e72a
- SHA512 443af4185c2b359a4895c89e6be07f37aa35a312ba7468cb0f1c2c98e489eeaa168d2d198b5ed31fd317c94fa685f89352931f82fa8daea2bb198beb18fb955c
- SSDEEP 384:nccUQQygc44+4Y6nbQLYtaghD+dpyhg/A7zC7jQ:nNkL3YdAshg/Ay7jQ
- TLSH T11DB29621D83A6573C3A7C86F6973E2125B29BD0B1900193C7BCC93189F5A279D2F59EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target tg-proxy-main/proxy/utils.py
- Size 2KB
- SHA256 5412a3cd8abbeb941f3a5f9863fc3ac5b83b777c69746780f60b8a746c3f7a95
- MD5 3b4c16396b74f85249250aeb2b1e1a40
- SHA1 696cf8263f36c5d2d4e2d8607eec579c8e5237ac
- SHA512 cbb51f07fb5e77c6905d5009207e66523b204fa882a47450c04788034632137ebbe129729374057d5e431dab7407e4732e0f0de7071fa3577805c7fffce40994
- TLSH T1625148D264B6982593A38891CD16E223B31EE883154D6B317FFC1554FF16628B1B0EDC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target tg-proxy-main/ui/__init__.py
- Size 158B
- SHA256 fed04f479d8cf53d45ebd42984d094ae681810049eebfa08b62592a8e60501f0
- MD5 17b1a778e9a70fae1005057996bdcfb8
- SHA1 9d933fbd10e7f381e0453c4d2bdc71c6bd58165b
- SHA512 7254826579c5d1d41c088fab447c4e8464bca6e23b6c81f600ad65546cc698d980e09b8a68c0e6eb60c169a28758deabd9a7b4c8ce28860979c36ec636adda68
- TLSH T101C08C12D262983DD370B01ABC04309C6D8A80BDB9C707E30624266C76E1418C65C72B
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target tg-proxy-main/ui/ctk_theme.py
- Size 2KB
- SHA256 9d5470556d4b6254f9eed909ea62ee7152cfbbb11f06f9087732bd2bb6073066
- MD5 13d62d88faba19c45b6986d30a92e0a3
- SHA1 d84d8eea8428eab15e82c0f8588f43e501f1728c
- SHA512 7c9fe0e36becfdba749a384537c45c106db1806c815762bb5580b4ee03042251069c2107eacca9baed282701d1ce2c7419adab6b7ec4bc9139934676f68606a3
- TLSH T10351122D29103513B777C48D94EB9811972A795399883834B7ACE7FD0F9E53A80BB3C9
- MD5 SHA1 SHA512 TLSH
Score3/10