redtiger | Adiyan_KE_MODS_OPOP[.]rar

Resubmissions

07/01/2025, 17:56

250107-wh19matmcm 1

07/01/2025, 15:17

250107-sn7rtawpdt 10

Sharing

Copy URL

Twitter E-mail

General

Target

Adiyan_KE_MODS_OPOP.rar
Size

45.3MB
MD5

9d6873f78dc2ad62ec430376b2aed352
SHA1

18eb556b5669e3f8bebc40788b2172506a89c983
SHA256

787973b043f75a5e977e1206811f437fa76cd7127a29bbb3b795337cbc940767
SHA512

0ba84466ee3ba55a33625fe358b78f6538e2d7bbcecc14ef6a5beb3fed72630eb60cce7a88572161384ab898e353482f14175338ed69feedf08fe4094a79414c
SSDEEP

786432:i5j4GrMhXY+/36PvKMgNswJ3Cw87Lt0P5uNzQT2T0Pw23/9DoShysv9tUKDF7gPi:iuVtY+K3Ce43Czt0huN0ST044/9DoSh9

Score

10^/10

stealer luna redtiger LunaGrabber

Malware Config

Signatures

Detects RedTiger Stealer 64 IoCs

stealer

resource	yara_rule
sample	redtigerv122
sample	redtigerv22
sample	redtiger_stealer_detection
sample	redtiger_stealer_detection_v2
sample	staticSred
sample	staticred
sample	redtiger_stealer_detection_v1
static1/unpack001/BadOptimizations-2.1.1.jar	redtigerv122
static1/unpack001/BadOptimizations-2.1.1.jar	redtigerv22
static1/unpack001/BadOptimizations-2.1.1.jar	redtiger_stealer_detection
static1/unpack001/BadOptimizations-2.1.1.jar	redtiger_stealer_detection_v2
static1/unpack001/BadOptimizations-2.1.1.jar	staticSred
static1/unpack001/BadOptimizations-2.1.1.jar	staticred
static1/unpack001/BadOptimizations-2.1.1.jar	redtiger_stealer_detection_v1
sample	redtigerv122
sample	redtigerv22
sample	redtiger_stealer_detection
sample	redtiger_stealer_detection_v2
sample	staticSred
sample	staticred
sample	redtiger_stealer_detection_v1
static1/unpack001/DarkKore-0.3.5-1.19.4.jar	redtigerv122
static1/unpack001/DarkKore-0.3.5-1.19.4.jar	redtigerv22
static1/unpack001/DarkKore-0.3.5-1.19.4.jar	redtiger_stealer_detection
static1/unpack001/DarkKore-0.3.5-1.19.4.jar	redtiger_stealer_detection_v2
static1/unpack001/DarkKore-0.3.5-1.19.4.jar	staticSred
static1/unpack001/DarkKore-0.3.5-1.19.4.jar	staticred
static1/unpack001/DarkKore-0.3.5-1.19.4.jar	redtiger_stealer_detection_v1
sample	redtigerv122
sample	redtigerv22
sample	redtiger_stealer_detection
sample	redtiger_stealer_detection_v2
sample	staticSred
sample	staticred
sample	redtiger_stealer_detection_v1
static1/unpack001/Debugify-1.19.4+2.2.jar	redtigerv122
static1/unpack001/Debugify-1.19.4+2.2.jar	redtigerv22
static1/unpack001/Debugify-1.19.4+2.2.jar	redtiger_stealer_detection
static1/unpack001/Debugify-1.19.4+2.2.jar	redtiger_stealer_detection_v2
static1/unpack001/Debugify-1.19.4+2.2.jar	staticSred
static1/unpack001/Debugify-1.19.4+2.2.jar	staticred
static1/unpack001/Debugify-1.19.4+2.2.jar	redtiger_stealer_detection_v1
sample	redtigerv122
sample	redtigerv22
sample	redtiger_stealer_detection
sample	redtiger_stealer_detection_v2
sample	staticSred
sample	staticred
sample	redtiger_stealer_detection_v1
static1/unpack001/Gamma-Utils-1.6.15-mc1.19.4.jar	redtigerv122
static1/unpack001/Gamma-Utils-1.6.15-mc1.19.4.jar	redtigerv22
static1/unpack001/Gamma-Utils-1.6.15-mc1.19.4.jar	redtiger_stealer_detection
static1/unpack001/Gamma-Utils-1.6.15-mc1.19.4.jar	redtiger_stealer_detection_v2
static1/unpack001/Gamma-Utils-1.6.15-mc1.19.4.jar	staticSred
static1/unpack001/Gamma-Utils-1.6.15-mc1.19.4.jar	staticred
static1/unpack001/Gamma-Utils-1.6.15-mc1.19.4.jar	redtiger_stealer_detection_v1
sample	redtigerv122
sample	redtigerv22
sample	redtiger_stealer_detection
sample	redtiger_stealer_detection_v2
sample	staticSred
sample	staticred
sample	redtiger_stealer_detection_v1
static1/unpack001/IAS-Fabric-1.19.4-9.0.0-beta.5.jar	redtigerv122

LunaGrabber family
LunaGrabber

Matches Luna Grabber Rule For Entry 14 IoCs

Detects behavior indicative of Luna Grabber malware

stealer luna

resource	yara_rule
sample	LunaGrabber
sample	LunaGrabber
sample	LunaGrabber
sample	LunaGrabber
static1/unpack001/iris-mc1.19.4-1.6.11.jar	LunaGrabber
sample	LunaGrabber
static1/unpack001/lithium-fabric-mc1.19.4-0.11.1.jar	LunaGrabber
sample	LunaGrabber
sample	LunaGrabber
sample	LunaGrabber
sample	LunaGrabber
sample	LunaGrabber
sample	LunaGrabber
sample	LunaGrabber

Redtiger family
redtiger

Files

Adiyan_KE_MODS_OPOP.rar
.rar
BadOptimizations-2.1.1.jar
.jar
DarkKore-0.3.5-1.19.4.jar
.jar
Debugify-1.19.4+2.2.jar
.jar
Gamma-Utils-1.6.15-mc1.19.4.jar
.jar
IAS-Fabric-1.19.4-9.0.0-beta.5.jar
.jar
ImmediatelyFast-Fabric-1.2.11+1.19.4.jar
.jar
KronHUD-1.19.4-2.2.5.jar
.jar
Loqui-0.2.0.jar
.jar
NoChatReports-FABRIC-1.19.4-v2.1.6.jar
.jar
Xaeros_Minimap_24.2.0_Fabric_1.19.4.jar
.jar
Zoomify-2.9.4.jar
.jar
appleskin-fabric-mc1.19.4-2.5.1.jar
.jar
c2me-fabric-mc1.19.4-0.2.0+alpha.10.66.jar
.jar
citresewn-1.1.5+1.19.4.jar
.jar
cloth-config-10.1.117-fabric.jar
.jar
completeconfig-2.3.1.jar
.jar
continuity-3.0.0-beta.4+1.19.4.jar
.jar
custom-crosshair-mod-v1.5.2-fabric-mc1.19.4.jar
.jar
dynamic-fps-3.4.3+minecraft-1.19.4-fabric.jar
.jar
enhancedblockentities-0.9+1.19.4.jar
.jar
entityculling-fabric-1.6.2-mc1.19.4.jar
.jar
fabric-api-0.87.2+1.19.4.jar
.jar
fabric-language-kotlin-1.10.20+kotlin.1.9.24.jar
.jar
ferritecore-5.2.0-fabric.jar
.jar
indium-1.0.19+mc1.19.4.jar
.jar
invhud.fabric.1.19.4-3.4.18.jar
.jar
iris-mc1.19.4-1.6.11.jar
.jar
lazydfu-0.1.3.jar
.jar
lithium-fabric-mc1.19.4-0.11.1.jar
.jar
memoryleakfix-fabric-1.17+-1.1.5.jar
.jar
modernfix-fabric-5.7.2+mc1.19.4.jar
.jar
modmenu-6.3.1.jar
.jar
moreculling-1.19.4-0.17.0.jar
.jar
noHurtCam-2.1.0-1.19.4.jar
.jar
notenoughanimations-fabric-1.7.3-mc1.19.4.jar
.jar
reeses_sodium_options-1.6.3+mc1.19.4-build.90.jar
.jar
replaymod-1.19.4-2.6.15.jar
.jar
satin-1.12.1.jar
.jar
smoothboot-fabric-1.19.4-1.7.0.jar
.jar
sodium-extra-0.4.18+mc1.19.4-build.100.jar
.jar
sodium-fabric-mc1.19.4-0.4.10+build.24.jar
.jar
soundphysics-fabric-1.19.4-1.2.1.jar
.jar
starlight-1.1.1+fabric.ae22326.jar
.jar
uglyscoreboardfix-2.9.0.jar
.jar
vmp-fabric-mc1.19.4-0.2.0+beta.7.73-all.jar
.jar
voicechat-fabric-1.19.4-2.5.12.jar
.jar
waveycapes-fabric-1.4.7-mc1.19.4.jar
.jar
yet-another-config-lib-fabric-3.1.1+1.19.4.jar
.jar