General

  • Target
    RedTiger-Tools-main.zip
  • Size 2.8MB
  • Sample260709-jb8znsd13p
  • SHA256 c17b33d94d376d2ca267ebd0070bcfa2063caa0048290f638abbebf2ab722c37
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      RedTiger-Tools-main/Config/Utils.py
    • Size 18KB
    • SHA256 299bbe146bc286e618fc00daf5ed7a7559da145333323f76cfca471e178ed252
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      RedTiger-Tools-main/Plugins/Example.py
    • Size 4KB
    • SHA256 2e49596979f2a15c6794f4cd304ef74c6221cc63c23699669744129f9c772b7e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      RedTiger-Tools-main/Program/NSAdvancedScanner.py
    • Size 7KB
    • SHA256 040167ddd32dbe542b11abe0a861d9ee9f208054cc2ea1dab8ba3c7ddc778bf4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      RedTiger-Tools-main/Program/NSHostDiscovery.py
    • Size 4KB
    • SHA256 916e11b7aaf74d1985931615bd47e3b0d1547f1010640b7a203a0625c5ead11e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      RedTiger-Tools-main/Program/NSIpPinger.py
    • Size 3KB
    • SHA256 7ac2874c4adbe90467b183b34b3c256207c8ad828d4e2a884911369706b1adc3
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      RedTiger-Tools-main/Program/NSPortScanner.py
    • Size 5KB
    • SHA256 c0d689e403c692cbd2dca63926257f6abd00bc562328acd92951690dabfe049c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      RedTiger-Tools-main/Program/NSUrlDiscoveryCrawler.py
    • Size 5KB
    • SHA256 1f20da7b45e442089e94688da984353b450871e475620db28e2938ac690b4f5e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      RedTiger-Tools-main/Program/NSVulnerabilityScanner.py
    • Size 35KB
    • SHA256 068e64537d63da7daaacb87e1ac646d46fdaffa59a24a6c0e7bdacbd37674c99
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      RedTiger-Tools-main/Program/ODorkingQueryEngine.py
    • Size 7KB
    • SHA256 334449564e99cf5f8eebb3b5093eec8784e4a8296ca914f86a2b938dbb844a71
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      RedTiger-Tools-main/Program/OEmailLookup.py
    • Size 4KB
    • SHA256 e207da0ac82972dcbccd976030b34c66182ddc465574553426fe2a31f98df339
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      RedTiger-Tools-main/Program/OEmailTracker.py
    • Size 10KB
    • SHA256 90719a76eccc64e31beda9f5066fa58d066c60bbc0954b367a37bac640d1f160
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      RedTiger-Tools-main/Program/OInstagramProfileLookup.py
    • Size 4KB
    • SHA256 235076dfecde51eedf1086422a275319bf3cce2352e8dae4597489f80249b385
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      RedTiger-Tools-main/Program/OIpLookup.py
    • Size 2KB
    • SHA256 2c1b03521d5194ba0b11078ed3bef43f80471a903ded7f88d30515049c086f38
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      RedTiger-Tools-main/Program/OPhoneNumerLookup.py
    • Size 4KB
    • SHA256 c1bb3d689111d768359616ef41713028d3055122374eb9d33307e2e733b01bf9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      RedTiger-Tools-main/Program/OUsernameTracker.py
    • Size 5KB
    • SHA256 12a250f5f60cf59885b49a7640377f424dd8e8c6d156de900d144c6b916f5bb6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      RedTiger-Tools-main/Program/OWalletTracker.py
    • Size 9KB
    • SHA256 913936d2369ed188d710fc84419b061ec0337a8461b90f3eb22eab6402d98b16
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

pdfevasion
Score
6/10

behavioral1

Score
3/10

behavioral2

Score
3/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
3/10

behavioral6

adwarepersistenceransomwarespyware
Score
8/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

adwarediscoverypersistencespyware
Score
8/10

behavioral11

Score
3/10

behavioral12

adwarepersistenceransomwarespyware
Score
8/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

adwarepersistenceransomwarespyware
Score
8/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

adwarepersistenceransomwarespyware
Score
8/10

behavioral23

Score
3/10

behavioral24

adwarepersistenceransomwarespyware
Score
8/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

adwarepersistenceransomwarespyware
Score
8/10

behavioral31

Score
3/10

behavioral32

Score
3/10