Overview

overview

10

Static

static

10

VapeV4.exe

windows10-2004-x64

10

NiceRAT.pyc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VapeV4.exe

  • Size

    20.3MB

  • Sample

    241224-qhbfbaylcm

  • MD5

    13a7bbd10551aaec3443b20cb3afbebd

  • SHA1

    3fd00a5d0faba6d684bdaaf87df1fc81095faa15

  • SHA256

    781a9255db93078bb36ea38c2b9a073eacf03f142693b51b7f257d7f8f1fb76e

  • SHA512

    f6f57901ec1ec791b601de3fea98639d5b59f2ef2e219c40590709ab4902b6d342f89ff44be39ed90c6758a275753002c4e595e1146aa957c97566b74098e76e

  • SSDEEP

    393216:kEkZQtss27GjJWQsUcR4NzQW+eGQRg93iObIhRS/MLzrqT6oHd8XTv/:khQtsAjYQFIW+e5R49MhR93ePyXT

Score
10/10
redtigerdiscoverypyinstallerstealer

Malware Config

Targets

    • Target

      VapeV4.exe

    • Size

      20.3MB

    • MD5

      13a7bbd10551aaec3443b20cb3afbebd

    • SHA1

      3fd00a5d0faba6d684bdaaf87df1fc81095faa15

    • SHA256

      781a9255db93078bb36ea38c2b9a073eacf03f142693b51b7f257d7f8f1fb76e

    • SHA512

      f6f57901ec1ec791b601de3fea98639d5b59f2ef2e219c40590709ab4902b6d342f89ff44be39ed90c6758a275753002c4e595e1146aa957c97566b74098e76e

    • SSDEEP

      393216:kEkZQtss27GjJWQsUcR4NzQW+eGQRg93iObIhRS/MLzrqT6oHd8XTv/:khQtsAjYQFIW+e5R49MhR93ePyXT

    Score
    10/10
    redtigerstealer

    • Detects RedTiger Stealer

      stealer

    • Redtiger family

      redtiger

    • Loads dropped DLL

    behavioral1

    • Target

      NiceRAT.pyc

    • Size

      16B

    • MD5

      3a0d4309583f2f5b242e352130abcc01

    • SHA1

      f69758b7687c4337f7235fdd9e8723c49d254287

    • SHA256

      bf8b7ac42546a146f1ebf72707d283fef6ec43b82522f07d39ca1251a9cf0ef0

    • SHA512

      e966a8aa2752a3054cbc5fdb0a05e4edcd5e379f3536d074151e5f9034408cf7b70260f2d1bcf7d4e8bcf633264850d76696164d49b4d2de64d06ed699745d55

    Score
    10/10
    redtigerdiscoverystealer
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks