3300cc32ab158e99d4ae0ab4a67d4c63682cb6d10ae3e09bd42e54a8c6feb6cf

Resubmissions

21/06/2026, 15:46

260621-s7p14sey5y8

21/06/2026, 15:43

260621-s5429adz5k4

21/06/2026, 15:39

260621-s3326sdz4n8

Sharing

Copy URL Twitter E-mail

General

Target
RedTiger-REMAKE-main.zip
Size 531KB
Sample260621-s7p14sey5y
SHA256 3300cc32ab158e99d4ae0ab4a67d4c63682cb6d10ae3e09bd42e54a8c6feb6cf
MD5 1e86327df0a1577f90711e7ebdbdbfbe
SHA1 65c43afa1e35d97cb1f8de7e70f2258c831bd595
SHA512 d51ec552ac14f9eef155bcd2d6fed6429dd14ef8c4d5efb8ff1c82b6c5bf0fa4b387d9f3f9bff8728603a13a8c8d849494527f7f419b88ed59805ba381d00422
SSDEEP 12288:ijqE2GUO3fjk2rXdPXaG+Yn10YJcZ1YPJds6zoeU2WL51zmCirXVlG99kPq:iYOjkmXdfbdS4b/oegztiL3o9kC
TLSH
T11BC423F393DD8D7B92C480CCAE50E1A987CD6455E1D2A7CD0472DAC798AC72242BA04F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  ReadySpy-tiger-Tool-Main/Program/Config/Config.py
- Size 1KB
- SHA256 782aba452866d72b150239a7e1923a89cc598782d599e7c7b8f6045b07786bb4
- MD5 404f3dbc84281b4b4229d45b82b07c48
- SHA1 4f42ac900dc67e05b888be66a108b2dac18386a0
- SHA512 655136e9ede5bc7e7539d6e0f97effd2e141785d9148d9d4c021f7b6001448afa14fc0900cbaa5ef343deff9101ccd2a1f939de9e90e4a1c265348a48e77187e
- TLSH
  T1C821D98F8DA08DF3077BC9C2EE5B540CEBA860A29689AA05300E93DC17582F050BD7C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  ReadySpy-tiger-Tool-Main/Program/Config/Util.py
- Size 51KB
- SHA256 bcb4b28e7dd48cdeb27bdbb5a809793e179bff7f46aa202f29b115121c7104ef
- MD5 32ee00518e363f245cfc2b558bdb8386
- SHA1 f257a697d2d51e8aae6ae097a3f477cacf7f4c21
- SHA512 137a6a21637355e15a23226c3ace9abc29fb85d245b02795fe4fa7f0e181efee7d0028d1de7b3ba1f06a04078f97d170d2eb25fb586cfb5d2bb9f88d62f8e830
- SSDEEP 384:pN3R2ZS56+nYst2JCDoRM1elaRi21cR3SclnrgtlS8LdWVSPYuxBq2APxRfQUuU:pNhHwCSc+X1RfQUuU
- TLSH
  T1B233A73AE88033299F76847E4C82E45DD75C27E3C179E82BF9DC41841FD4B11998A5FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  ReadySpy-tiger-Tool-Main/Program/Config/__pycache__/Config.cpython-314.pyc
- Size 940B
- SHA256 6141ff163c13a80ea622693622f25dcbcd06399bd17a75b71fd0db16f1781a99
- MD5 d88ce6d894c7cb091838809a98ebe432
- SHA1 5de67a28fca9a100a0300a4aec2ea7dff3e1f45b
- SHA512 7bc5cc06b6bbe5333f9ed82e6a714d30088b71bfba9910cb15fe5bd9f4ad340a8bee99647dc78c967b9a070f8c6afc979ffd0c1c46be07319e4e8aee0b015058
- TLSH
  T1B311D0CFB554DC83DF7E0DFBF620164AC816A6F6664F1346241A21BCCC7D0A225B3985
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  ReadySpy-tiger-Tool-Main/Program/Config/__pycache__/Util.cpython-314.pyc
- Size 61KB
- SHA256 0167894f2d9aab308810e2b11b720b079df692f66d8ad806d9564927667d5010
- MD5 6a8832cfa36a8fe339ee9b9767cd2027
- SHA1 c5d7c578722436adb2de93904d3396ebe65563da
- SHA512 603acb9686edd64a894a41dac7fe975aab8d136df650ccf77942b3584a78e2b1b65e24271761bdaac310b7c80e94c25f090e4eb4df2f5cf8d123fc758c119738
- SSDEEP 384:3SDiQTYgSLERIO986+ixZlP4GVJqfOJpE50yIR:3vQTYgSLERludGHqfOJpE55C
- TLSH
  T1E753A87AE4807326EE75A07E2CD6E4ADA71943E3D079CD03F5DD08696FC4B219C812E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  ReadySpy-tiger-Tool-Main/Program/D0x-Create.py
- Size 22KB
- SHA256 ac03b69e1f2407cbc13781e7299dace0d29f3158052ff69c5217a2368a7b8ede
- MD5 d7612b254336033414684edbecac5436
- SHA1 c4cf010ea234dad1a278653f734f36b99fa64381
- SHA512 26f057b651e5388af1ba71fb96c1fb3e4597e6f811ad371851c4a331f3f7820e62d9db78f8d32334420366210cdab396107c89b8ae569c01ab42a054c920ebfa
- SSDEEP 384:XGl+OCThrEvAi6J0/uldFtf4mcojRhcMXP6YqqkNVnLyYZCwMFhlu6MZ8qnKfzh/:XGl+OCThrEvA3utxI
- TLSH
  T1D6A27E6B18400127968DCC1CBE718C69A37A9993F5C9511EB4FC89C42F787B3FE4896B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  ReadySpy-tiger-Tool-Main/Program/D0x-Tracker.py
- Size 4KB
- SHA256 7cdfbf33047a636d07aa57eeb8d8cc9efe16080a7b965a05f17b914306e705bf
- MD5 74d24274f307ed885e68321dbf9ddd70
- SHA1 0727a1ff48d449f6a6dba11e02f97494c04b0614
- SHA512 13c548cdcc6ece41d0cc235948a83a3e8840fb1ee12fb9dc139a3d9373897cb5362ced158b5c2969d37931177a6de3579e638b9f1096c85888a2346336c0aff0
- SSDEEP 96:crhaXEFT54l/b4u/Wv5/G/0ljTe/0aG0Y3/HgWVM+avKluVmvJWu2vGUjvDe8tvX:tXE8/p/A/G/0I/O/HgDWu+Pa
- TLSH
  T1E2A1CD1B8C0C041187F6DA4498C5F0BDFBA5A707D882749E756DB2AC7B84AF3C19C6DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  ReadySpy-tiger-Tool-Main/Program/Dark-Web-Links.py
- Size 7KB
- SHA256 ca22fbdd05e7485066512d4a6b60129c573bce65ff95a32cb1e5a06a96c69797
- MD5 e076406bd948ff02d25c9e74260018cb
- SHA1 2c7484e14bad95e2e6537af6696e9f61091a2ee9
- SHA512 7b026b273a18f21aa4402367be6fd0ef5d184f0b8250764e4e73914290ba9439f866d1c1fa1d0e07bee612ad40d1c7ca38c305fe64bdf14966c6c39be3ec26bf
- SSDEEP 192:tXEFgH2S8jqokY9UOIWnAw47zI79qBo+VlBDbN2+69Sca:DcFXeRw2hFNn
- TLSH
  T124E12C8DEC602D636985D89DE6FAC926E73051830CD13813F64C1A8C8F6E7ABB16C75D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  ReadySpy-tiger-Tool-Main/Program/Discord-Bot-Invite-To-Id.py
- Size 1KB
- SHA256 38aceea7e958f3fa4e8f5358457d26ff16238d1b0ad0589726d45218f4c5593c
- MD5 45964b782a6c91d9ce513392253f54a8
- SHA1 23a70cfb08aaa47d608e00f768113ec128b24526
- SHA512 e622cb703d7bc917964efaed292a3bd47f26fa720f8c5ba176ad870433581ac359ebc6e419ea0658dfb6cd38502411124eb66bcb4419905c1fc6e96ac307cefb
- TLSH
  T19B31020B0E810277C326C4955E67D86CE7A91A53A9C5A72AB0ADC3D01B843B4D21D5EB
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  ReadySpy-tiger-Tool-Main/Program/Discord-Bot-Server-Nuker.py
- Size 8KB
- SHA256 bd49fd6e8901eb2c65858acfe77ff4962afa6483958d9ed147a5767e8e38e3b9
- MD5 010c942625589cc10e233ac78f6ae06a
- SHA1 4a1142f67e3fe69fa0146e1ea4653c19e110d8fd
- SHA512 0991294356591f13372fb5abac36c9071e86c703ed9c183cce684446347497876be661c9d98216bcf6540f6facc6e27b1d125e5e86fa867439726205f8a021f6
- SSDEEP 192:tXEQ/m//a/Gcy+grCZNDyU/6qDjDU/ISsDjDU/IoDpD0Dy8/bDDr/An/Ack0a:LunauVSGUyqvgglvggoFgG8T/r4n4ZP
- TLSH
  T1DB024362DCAB0C3BC6D2E80AACF2A105F91DB353A449703A71CCD1127F64673E15D97A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  ReadySpy-tiger-Tool-Main/Program/Discord-Nitro-Generator.py
- Size 3KB
- SHA256 cda1aa5d465bda34e433fa742b68b4675a5c8c274587a609935938f28c3d49f8
- MD5 96688d8a238fc1702fcb8b4721a1e98a
- SHA1 12b79ead68bca730285e816b1224a0a7309809ae
- SHA512 8549c5f82e446649ccecace837fedc40740316f66929a9e9e1e6caba4822818923daff6cf11a82036c90495e0dd97b9db02e2f101a6c4b2e01c178ffc49574f9
- TLSH
  T10F61731B0D42043BC796C4AD4D8AC04CF77B7A132985AD29B9ECC2B41F8C275C25D6F9
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  ReadySpy-tiger-Tool-Main/Program/Discord-Rat-(Premium).py
- Size 1KB
- SHA256 0a122f664a9a64712c5c585400a4ce9af9120099fc4b2df332310a822f6d22d8
- MD5 d81b871d20c0e960ca6cb9e0e169142e
- SHA1 aef8ee5a2d07fd97a323ed6ff37ad4aa63edf341
- SHA512 d3879b80437fae8ba4b0f6de4bc72cf6b21bea8594feeb7f965c1c03a0edab486a37ca6550c55d4ce9fc79996566b58175fc6bb102e341a305c955fa1fe3b78f
- TLSH
  T16B11444B8FE002B34221C4D5512EE47CF7B90A03A9C4AA14748D93C413C43B0C05C8EE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  ReadySpy-tiger-Tool-Main/Program/Discord-Server-Info.py
- Size 6KB
- SHA256 d8eb0e9a9e3772cb05ca334581e9f0e50899c19f8bd691c9ac687765b5d7e4e6
- MD5 eade3df850bfe04e0f1a0134bce587af
- SHA1 f0fef7a8cd0d28a3fb0fcc78aa4f4ae9d57bcfc4
- SHA512 fcf412ad3062ea0fea9b7322d7d2a4115afae829cbf445da5c2ef8d0d55e35815e4d2e4673b8183ceb13182a29e1072d270e6c1c516702e3373c3bcb2803e6dc
- SSDEEP 96:crhaXEFrn/B28Zk1XTHJ7VGq1qQHynisa:tXEZ/B9kxHhVGHQHGa
- TLSH
  T16DD189B74CC55C1B7386C49E5D835010D3B9B802FE4A6800BACE71966FCC923966DABF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  ReadySpy-tiger-Tool-Main/Program/Discord-Token-Block-Friends.py
- Size 2KB
- SHA256 4c655eb75d8172f7b3ff258acbb4c5d903991363577546550f7e4c1ca927651a
- MD5 0d3ea8d6d1bfebbc894eb5131ba040b7
- SHA1 f59b64f87d460c1480051b0212f8d8e9982de4e4
- SHA512 7540db98b40be0cea9bc285dba1841aed40e9b623513ddd76382e4cb8b66f16c8e5310f734fcd90aaeb7c6b3c6b426ab0cbfbb1b7ae5da41e4e81ce14cf0e095
- TLSH
  T1B54132878C441173C356C81CDA5B853EE77A2A83674E622532ECC3842F4C6B1D50E9FA
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  ReadySpy-tiger-Tool-Main/Program/Discord-Token-Delete-Dm.py
- Size 2KB
- SHA256 0c6e8e26487060f1502aeb22ae7f72f263c88c699764fc181cb0ae99764e981d
- MD5 ce8eab355a9ef373db73d35c21847ff5
- SHA1 812cec0763f6adace49ada3d2cc0bf7763b2b0ac
- SHA512 450ee6c3b65c92bcdb52a78eb7d363ff24b49b8f9b0623ac3c17590703fd12c149f28232da1903bf321c198d302b65f4f5e65a4db379651488224325aae34ec8
- TLSH
  T1EB411EC7ED841033C292D859D99A852EEB6E3B07E54A622570DCD3C81F88675D00EEFA
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  ReadySpy-tiger-Tool-Main/Program/Discord-Token-Delete-Friends.py
- Size 2KB
- SHA256 f4657b5d7b55dee96a60e608012ca189b045b90af5fc6354a3914b447a4d1643
- MD5 cc3181eeba8030b44424c0e94ab01a78
- SHA1 79df53177bb992ed8eca8642c3557b97e06ff5e6
- SHA512 015bec0ea1638b8c01a3a3c192650e3408cfd27577a410fa522fe9e16cceae1bf763c7498bb91afa91aaa9e27e271cad68acdf31fe531df11e5e7f6d86c47f2a
- TLSH
  T10C5122D74D550433C342C82EDA4B953FF73A2A47664A722971ECC3842F886B5C10EDE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  ReadySpy-tiger-Tool-Main/Program/Discord-Token-Generator.py
- Size 3KB
- SHA256 0b186eea9886fa99fedcd1500eea5e5b7101502792a41b974c12c21c5e08dec7
- MD5 92b4609b70183e3d66c6eaea3fb1150f
- SHA1 a5d160c24ee73e29cf0c1da50943d48ec90e0d31
- SHA512 7542247b485d154bd0e84d12c90ee47a1cfedf69169c3f749ab3457b112b40617887245bedcd1a656c9faeb0c6ee7492e95b0de3872eee559f119a7de51d6ef7
- TLSH
  T1028187274D450032C39ACC8A8D8ED09CF32B761368455D6975DDC2F41FC92B7929EAF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32