Resubmissions

17/03/2025, 11:41

250317-ntvxzsskz27

25/01/2025, 05:21

250125-f17lcsyrbl7

13/01/2025, 11:30

250113-nmm9kaspgm10

12/01/2025, 22:38

250112-2kh4qasphw10

General

  • Target
    final.exe
  • Size 28.5MB
  • Sample250112-2kh4qasphw
  • SHA256 d765f74af0a7e3986616b3018fd6190bd389458dcd408f208cb34072ef4eef12
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Detects RedTiger Stealer 14 IoCs
  • LunaGrabber family
  • Matches Luna Grabber Rule For Entry 2 IoCs

    Detects behavior indicative of Luna Grabber malware

  • Redtiger family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • final.exe
    .exe 28.5MB
  • final.pyc
    5.2MB

final.exe

  • IMPHASH 72c4e339b7af8ab1ed2eb3821c98713a
  • SHA256 d765f74af0a7e3986616b3018fd6190bd389458dcd408f208cb34072ef4eef12
  • MD5 SHA1 SHA512 SSDEEP
  • Detects RedTiger Stealer

  • Matches Luna Grabber Rule For Entry

    Detects behavior indicative of Luna Grabber malware

  • Detects Pyinstaller

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
52768
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths