fb5f7dba732641acc641df1763cf0386503100c7ac7f821906393e820e20fcc7

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
14/08/2024, 13:05

Target

RedTiger-Tiktok_Tool.exe
Size

46.8MB
MD5

203ad97a9aefa13229aa93edfe92a0a3
SHA1

4cd09395e0e740c1e51bb9bf8dcfca0ac59fe91a
SHA256

fb5f7dba732641acc641df1763cf0386503100c7ac7f821906393e820e20fcc7
SHA512

0469b774f9cf86758c683047596955a5003df8851a36442200c6f6c80301f3e6783f90904010a6b2d2c8981ee533c093a223f6965b88ee0b961dd88d6b993b42
SSDEEP

786432:E1WJ1X+UTV7LyEyEyEyEyMyEyEyEyEyEyEyEyEyEyTyEyTyEyS1QtIJ2j6+s7LWL:N1XJVdiIJ2qHWB75iVvSGN5AlBi9LDtq

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1072	RedTiger-Tiktok_Tool.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2404 wrote to memory of 1072	2404	RedTiger-Tiktok_Tool.exe	31
PID 2404 wrote to memory of 1072	2404	RedTiger-Tiktok_Tool.exe	31
PID 2404 wrote to memory of 1072	2404	RedTiger-Tiktok_Tool.exe	31

C:\Users\Admin\AppData\Local\Temp\RedTiger-Tiktok_Tool.exe
"C:\Users\Admin\AppData\Local\Temp\RedTiger-Tiktok_Tool.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2404
- C:\Users\Admin\AppData\Local\Temp\RedTiger-Tiktok_Tool.exe
  "C:\Users\Admin\AppData\Local\Temp\RedTiger-Tiktok_Tool.exe"
  2⤵
  - Loads dropped DLL
  PID:1072

C:\Users\Admin\AppData\Local\Temp\_MEI24042\enchant\data\mingw64\share\enchant\hunspell\en_BZ.aff

Filesize
3KB

MD5
eaae9bae63b305440b412a48e1653a26

SHA1
e22be4b305584c419dbfdad2f69bfa1bb181d239

SHA256
c7a8c4d08c29d237880844b1623099f59092602f189be38ce3912e457ff38bc1

SHA512
b18126f63bae384cd32786093f462a5dbc906e47a4a3b93c90e394a2282af2a0e3e9a817d0087659dcd951d61f5522cb1a498e208a626fa5738e236a62506406

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI24042\enchant\data\mingw64\share\enchant\hunspell\en_BZ.dic

Filesize
858KB

MD5
d86429a85e0679a555364efd361e60fc

SHA1
406ac90471f343e893c6570876fba34ca5b44583

SHA256
e8472278e3235f14a9b44fb90e6482f611a547a6bfb86e52c074e3d40849c3c5

SHA512
8ccbfa7c06f9e3b97a46466805dcc9f9b992c15d55393a618d3591ffc376f0695e4d326272bd0ccfdd24432dc2266bcd7fd648fc47149a7e2255f93ad24be338

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI24042\python312.dll

Filesize
6.7MB

MD5
550288a078dffc3430c08da888e70810

SHA1
01b1d31f37fb3fd81d893cc5e4a258e976f5884f

SHA256
789a42ac160cef98f8925cb347473eeeb4e70f5513242e7faba5139ba06edf2d

SHA512
7244432fc3716f7ef27630d4e8fbc8180a2542aa97a01d44dca260ab43966dd8ac98b6023400b0478a4809aace1a128f1f4d6e544f2e591a5b436fd4c8a9d723

Download Submit