Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/01/2025, 01:48
Behavioral task
behavioral1
Sample
UuuClient.exe
Resource
win7-20240903-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
UuuClient.exe
Resource
win10v2004-20241007-en
4 signatures
150 seconds
General
- Target UuuClient.exe
- Size 446KB
- Sample250107-b78psazqgr
- SHA256 22431a11497a177fcb5aa362c7a7a7eb21e1c9a27015233f750a24abcbb730cf
- MD5 f27ece59b091a854a1a1d94eff3f27ae
- SHA1 e5b0260fafccf5c46cd066d70e2f608a39036b88
- SHA512 c06be34e69f9fdc92cb4c98d3c60cd022f779f7fb155fb4f26eb96df50b0433bf8e25d904427f68ce334ef1076053c336753aba5cefac2273673c5187369d646
- SSDEEP 3072:4r7fUiujm4LRk2sdVCx42LNtu2ykNARuyuY4YrMR2nR1kwGZPWMaQiDr:mRIUjCxE9kNAcyRMPRZ+hD
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Detects RedTiger Stealer 21 IoCs
resource yara_rule behavioral2/memory/3744-1-0x000001293E260000-0x000001293E2D4000-memory.dmp redtigerv122 behavioral2/memory/3744-1-0x000001293E260000-0x000001293E2D4000-memory.dmp redtigerv22 behavioral2/memory/3744-1-0x000001293E260000-0x000001293E2D4000-memory.dmp redtiger_stealer_detection behavioral2/memory/3744-1-0x000001293E260000-0x000001293E2D4000-memory.dmp redtiger_stealer_detection_v2 behavioral2/memory/3744-1-0x000001293E260000-0x000001293E2D4000-memory.dmp staticSred behavioral2/memory/3744-1-0x000001293E260000-0x000001293E2D4000-memory.dmp staticred behavioral2/memory/3744-1-0x000001293E260000-0x000001293E2D4000-memory.dmp redtiger_stealer_detection_v1 behavioral2/memory/3744-2-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp redtigerv122 behavioral2/memory/3744-2-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp redtigerv22 behavioral2/memory/3744-2-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp redtiger_stealer_detection behavioral2/memory/3744-2-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp redtiger_stealer_detection_v2 behavioral2/memory/3744-2-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp staticSred behavioral2/memory/3744-2-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp staticred behavioral2/memory/3744-2-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp redtiger_stealer_detection_v1 behavioral2/memory/3744-3-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp redtigerv122 behavioral2/memory/3744-3-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp redtigerv22 behavioral2/memory/3744-3-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp redtiger_stealer_detection behavioral2/memory/3744-3-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp redtiger_stealer_detection_v2 behavioral2/memory/3744-3-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp staticSred behavioral2/memory/3744-3-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp staticred behavioral2/memory/3744-3-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp redtiger_stealer_detection_v1 - Lunagrabber family
- Matches Luna Grabber Rule For Entry 2 IoCs
Detects behavior indicative of Luna Grabber malware
resource yara_rule behavioral2/memory/3744-2-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp LunaGrabber behavioral2/memory/3744-3-0x00007FFC4FD40000-0x00007FFC50801000-memory.dmp LunaGrabber - Redtiger family