Overview

overview

10

Static

static

10

DrawBot.exe

windows7-x64

10

DrawBot.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DrawBot.exe

  • Size

    12.0MB

  • Sample

    241221-azjv1syldr

  • MD5

    d5590d95153ccd6b0ac09020af864010

  • SHA1

    601bdadd9754db56648d7f40a0e19d770740cc79

  • SHA256

    0faddbf09db2c91e8a9b399557c16f4c2429f5025e559a6ed06f933869a89445

  • SHA512

    930d9947e56a199da96be45335824ca355c3b136a85272969464f461e4cf8ec8167a255dbf0af648b1ee8a4572df35c32c71467ecc9dadede1c3e99feac49bf6

  • SSDEEP

    196608:73+52nt/tv1SLaFaH/GCsXDjDyfmdJolpPgToa10/J48RmU/3ZlsPv8r2RQFOnJv:zt/xs2FSOCEDLJ83a10RtN3ZW8+QsBT4

Score
10/10
redtigerpyinstallerstealer

Malware Config

Targets

    • Target

      DrawBot.exe

    • Size

      12.0MB

    • MD5

      d5590d95153ccd6b0ac09020af864010

    • SHA1

      601bdadd9754db56648d7f40a0e19d770740cc79

    • SHA256

      0faddbf09db2c91e8a9b399557c16f4c2429f5025e559a6ed06f933869a89445

    • SHA512

      930d9947e56a199da96be45335824ca355c3b136a85272969464f461e4cf8ec8167a255dbf0af648b1ee8a4572df35c32c71467ecc9dadede1c3e99feac49bf6

    • SSDEEP

      196608:73+52nt/tv1SLaFaH/GCsXDjDyfmdJolpPgToa10/J48RmU/3ZlsPv8r2RQFOnJv:zt/xs2FSOCEDLJ83a10RtN3ZW8+QsBT4

    Score
    10/10
    redtigerstealer

    • Detects RedTiger Stealer

      stealer

    • Redtiger family

      redtiger

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks