2748c021aed9bc56adcb16e38e06eb5877a1c809c44732f899eb923939aabb58

Sharing

Copy URL Twitter E-mail

General

Target
RedTiger-Tools-main.zip
Size 3.2MB
Sample260628-yphf7sdx6m
SHA256 2748c021aed9bc56adcb16e38e06eb5877a1c809c44732f899eb923939aabb58
MD5 86277f84c2253bf506172d1ec7710ea8
SHA1 e695dbd9b78115df7850a3ec404e418dccf866a9
SHA512 deb9a13a77fa121da8726600ddb41c42e6d9954ae184309ffcd204662ab4c89640e076442f09e169c38be6f5d47494063891434a7683bdb890492389441a7067
SSDEEP 49152:mAu+I38Ig3vQ2/adwNsmNWfCq5GJlVg9Mln/8iD0KlgyrZmotNvKyAWAZNu8sKuK:KzCqvsEs0yNmQin+WNK41MEonhASZtrc
TLSH
T19CF533CFEFB51D52F2CD99B86904FDD4BA63D829F42FE2974F0375AA8855107026828C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  RedTiger-Tools-main/Program/Config/Config.py
- Size 1KB
- SHA256 14a20559e30a3b85a1d2e1cc5f61fdb512bc74f27201f1c37b9dc4004dfd1d9c
- MD5 38d97c904580eb1159f74193fe2a528e
- SHA1 633ba4f668778e432f65cf2852b960ea3cbf71d3
- SHA512 56f3d1750331984d1858648905eb51eab5b10a9643422ee21e575dc3eda43561a3a94b919c1b54fba9249afae486ba1e5acfe99f1ed213f63159f13b060d6c55
- TLSH
  T14821D98F4D608DF31B7BC9C6ED1F640CEBA960A29689E901341EA3DC53282F054BE7C4
- MD5 SHA1 SHA512 TLSH
Score

7^/10

google defense_evasion discovery persistence phishing privilege_escalation ransomware spyware trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Detected potential entity reuse from brand GOOGLE.
  phishing google
behavioral1
- Target
  RedTiger-Tools-main/Program/Config/Menu.txt
- Size 1B
- SHA256 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
- MD5 eccbc87e4b5ce2fe28308fd9f2a7baf3
- SHA1 77de68daecd823babbb58edb1c8e14d7106e83bb
- SHA512 3bafbf08882a2d10133093a1b8433f50563b93c14acd05b79028eb1d12799027241450980651994501423a66c276ae26c43b739bc65c4e16b10c3af6c202aebb
- MD5 SHA1 SHA512
Score

1^/10
behavioral2
- Target
  RedTiger-Tools-main/Program/Config/Util.py
- Size 51KB
- SHA256 bcb4b28e7dd48cdeb27bdbb5a809793e179bff7f46aa202f29b115121c7104ef
- MD5 32ee00518e363f245cfc2b558bdb8386
- SHA1 f257a697d2d51e8aae6ae097a3f477cacf7f4c21
- SHA512 137a6a21637355e15a23226c3ace9abc29fb85d245b02795fe4fa7f0e181efee7d0028d1de7b3ba1f06a04078f97d170d2eb25fb586cfb5d2bb9f88d62f8e830
- SSDEEP 384:pN3R2ZS56+nYst2JCDoRM1elaRi21cR3SclnrgtlS8LdWVSPYuxBq2APxRfQUuU:pNhHwCSc+X1RfQUuU
- TLSH
  T1B233A73AE88033299F76847E4C82E45DD75C27E3C179E82BF9DC41841FD4B11998A5FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  RedTiger-Tools-main/Program/Config/__pycache__/Config.cpython-312.pyc
- Size 901B
- SHA256 aec227f20dd8947fb2d2014f467abbd254d759ed327e29c62c46b0644f5c1d64
- MD5 cdc1ad6c1a8b8314b1ad2a1dedada63f
- SHA1 c39a441b3a880010ece17c5f27b27d9c4d884ad9
- SHA512 e0a690c3377e4b21b41246718084ba60646099e8aea737eefa918eb88a21f0feb0d5fb9f188b5a916f1645b3639a3f23fd5a6854d3640898e0e9c0af7da64c5d
- TLSH
  T19D11DCCFB520D8C7CF7E0EBAB51527058C82A5F56B8A5649291A7268CC3D1A135F3982
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral4
- Target
  RedTiger-Tools-main/Program/Config/__pycache__/Config.cpython-314.pyc
- Size 903B
- SHA256 c868400cf23c1a1469652da8e800a48ba3b180e722057acff2a6eaf621a1f107
- MD5 bf400d691ed2b954534026aca1d9619d
- SHA1 82b5333ee0c909b7f8fed8e950414507b3ed8323
- SHA512 982a6f1e690983744e4ff8bb2059c5b50b4f5059e0c9d0bf5c8b25c25ceb3048360ceb4e344a7072faba1954445097adfd13dbf738677976b5f2df7c101b91ce
- TLSH
  T1A211EDCFB410D4C3CF3E0EBBA11866458C42A4F26786524A15193228CC2D1E235E3981
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5
- Target
  RedTiger-Tools-main/Program/Config/__pycache__/Util.cpython-312.pyc
- Size 60KB
- SHA256 d14c03fd93f24fb50d491c1529ff8e99a214ee9be600c68d5c108deefd83d648
- MD5 ff03f149ab0a479c345072a406f4dcc5
- SHA1 b5cbdfc2017eb0eb087847a3dec99523be35a640
- SHA512 554f603426bee65e132e694d864d7f97ccab832b4d7d5f090a6edd8dc3f03bd5bfaf32643dc692a7947a28ce417c244cf81088ae4b7b3446e355e51a0cde465e
- SSDEEP 384:i03EGCjScDNs/P/rfmslbqwmrvXDfoirsdtW/0qfOJpe0yPK:iMlChDNs/P/6slbQjzfgLWMqfOJpe5C
- TLSH
  T11B53857AE680B326FE75A07E0C82E05EA7694BF3D175CA23F5DD80181FD4B11AC811E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral6
- Target
  RedTiger-Tools-main/Program/Config/__pycache__/Util.cpython-314.pyc
- Size 61KB
- SHA256 a80edffd765ef3aa0640fe199970eef34299608bcf41fd5b7853132445649793
- MD5 e5cc733596b2448536a4706192793d24
- SHA1 783484c209dc27868333b22dcbbb76a147a7fedf
- SHA512 1c9d4d863e9d5244e525b1f7917ae62a7bab83aee9393ba8d04207e52411cdb124aadd135350cc743dd5985235dbc2116dda66e01da6134a7ce076eb810a9642
- SSDEEP 384:OSTCqiQTYgSLERIO986+ixZlP4GVJqfOJpE50yIR:OICJQTYgSLERludGHqfOJpE55C
- TLSH
  T1D953A87AE4807326EE75A07E2CD6E4ADA71943E3D079CD03F5DD08696FC4B219C812E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7
- Target
  RedTiger-Tools-main/Program/FileDetectedByAntivirus/Password(redtiger).zip
- Size 29KB
- SHA256 bc584b113e4f47a3a160250400dd2427062908de87e458c12210f20a90744b4d
- MD5 c38f807d49657434c2601d941d9b7165
- SHA1 3e0b1f5dc3ae482dc407f5bdaf5904eaf15741ae
- SHA512 7956cb5585d4994b8e770fa68cc3007462969695e8ac9537e75e5ba954d6d47eee2408d564d49674d25657284bf31278bf6cf8b225854150d09a624fef79ac44
- SSDEEP 768:7d9PE6Hk0hsyrKgCqH2F6AAsuTARFjO7WCvWH/G:7d5zk5eV2XJE6Cv4e
- TLSH
  T101D2E1B75532CEA180F53D71C234FF5CEAFA78424A01AA72CF267C9431ABE414626B70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  RedTiger-Tools-main/RedTiger.py
- Size 22KB
- SHA256 31e7cdff2d63ee84d66e920768ac768575c10f40b819d8ff5fddf57af9fa152e
- MD5 59ec443ab299797629d9de61c36b34b7
- SHA1 08cd9b0341a667e830ee3c51be556aebf6afbefa
- SHA512 e490146d095f87ba720b9265887188781aa919ecb52068c86d3f8742e9fb897611e78b8704dcfd02ff705f32d9ab7cded90a202db4d08c01eade1e5a1d47a8e4
- SSDEEP 384:PI7//Vewzp4XAPq/2I42CRwY0YIOKKn9X22rVbfgYXr:PELAAPq/2I42C2Y0YINKnjgYXr
- TLSH
  T199B23834ED4D1E6ABAD7E1CE2499583E92317BA3BD648028748C33D617CCB61E0DB4B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral9
- Target
  RedTiger-Tools-main/Setup.py
- Size 1KB
- SHA256 d09fcb7c006f2020f49a7f1b983cfc62fcf4c654277407f462cdfec3411fe667
- MD5 02a21423f06e34d1a652a6ab4e57c039
- SHA1 5767db6db5f70eccc701c359bd75997199b4ef58
- SHA512 332023a0c32ee726ab77c7bf8b1c7dd76a78656cce7e1fab74c9434bf92808a4100f62413673ee010539a30ac252f107bc935a1187428c596012ea5a11d1163f
- TLSH
  T14831E04B2EA022B29316E2DBA04A406DE771A8535655A114B4FE43C8CB80E30C36DBE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10
- Target
  RedTiger-Tools-main/requirements.txt
- Size 341B
- SHA256 43af3715ffd216e4fe0cf7bc19449844d5ace80dfb8cf43c2533145f7269490a
- MD5 b4093606ef8dae92e4216b7b71cd2636
- SHA1 d371675e3d3e00960c7c6dcc49713c3f4641bf9d
- SHA512 38db7e7b5f8684fc1fd53911326e99c0603d336fd1239b74938d0bbf9c516e09520426f5641e326ec4a2fd3e82511728b079c29a8c415afdb7815ce9fb8b2b90
- TLSH
  T10AE0C0408D11F4532794FA2A1955CA184408F9C1A6A07358F35E064B388D74CC34C61F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11