Overview
overview
8Static
static
6RedTiger-T...ils.py
windows10-2004-x64
3RedTiger-T...ils.py
windows11-ltsc_2024-x64
3RedTiger-T...ple.py
windows10-2004-x64
3RedTiger-T...ple.py
windows11-ltsc_2024-x64
3RedTiger-T...ner.py
windows10-2004-x64
3RedTiger-T...ner.py
windows11-ltsc_2024-x64
8RedTiger-T...ery.py
windows10-2004-x64
3RedTiger-T...ery.py
windows11-ltsc_2024-x64
3RedTiger-T...ger.py
windows10-2004-x64
3RedTiger-T...ger.py
windows11-ltsc_2024-x64
8RedTiger-T...ner.py
windows10-2004-x64
3RedTiger-T...ner.py
windows11-ltsc_2024-x64
8RedTiger-T...ler.py
windows10-2004-x64
3RedTiger-T...ler.py
windows11-ltsc_2024-x64
3RedTiger-T...ner.py
windows10-2004-x64
3RedTiger-T...ner.py
windows11-ltsc_2024-x64
3RedTiger-T...ine.py
windows10-2004-x64
3RedTiger-T...ine.py
windows11-ltsc_2024-x64
8RedTiger-T...kup.py
windows10-2004-x64
3RedTiger-T...kup.py
windows11-ltsc_2024-x64
3RedTiger-T...ker.py
windows10-2004-x64
3RedTiger-T...ker.py
windows11-ltsc_2024-x64
8RedTiger-T...kup.py
windows10-2004-x64
3RedTiger-T...kup.py
windows11-ltsc_2024-x64
8RedTiger-T...kup.py
windows10-2004-x64
3RedTiger-T...kup.py
windows11-ltsc_2024-x64
3RedTiger-T...kup.py
windows10-2004-x64
3RedTiger-T...kup.py
windows11-ltsc_2024-x64
3RedTiger-T...ker.py
windows10-2004-x64
3RedTiger-T...ker.py
windows11-ltsc_2024-x64
8RedTiger-T...ker.py
windows10-2004-x64
3RedTiger-T...ker.py
windows11-ltsc_2024-x64
3General
- Target RedTiger-Tools-main.zip
- Size 2.8MB
- Sample260709-jb8znsd13p
- SHA256 c17b33d94d376d2ca267ebd0070bcfa2063caa0048290f638abbebf2ab722c37
- MD5 942955ca63bf4cf3cfe55aae3ed59a04
- SHA1 32b6bcf56772465ba1f11b6a97a95c2f050c194b
- SHA512 eeb84f93065e01fc81819a89f2288af41f8fdfa5f0895911a7abf02d5b535108f6e0aece98376f822ea68c85d76d8034c70ca016c4bc464ded146ab3866f7dbd
- SSDEEP 49152:fcxdZxi6r0R6Ln879tDVg9Mln/8iD0KlgyrZmotNvKyAWAZNu8sKuGNKILdua1T+:csEs0yNmQin+WNK41MEonhASKm
- TLSH T1FED533DFEE765D92E2C99CB8B511FAE4F93BD83DE06BD6B24B03766A4086107121C14C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
RedTiger-Tools-main/Config/Utils.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
RedTiger-Tools-main/Config/Utils.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
RedTiger-Tools-main/Plugins/Example.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
RedTiger-Tools-main/Plugins/Example.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
RedTiger-Tools-main/Program/NSAdvancedScanner.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
RedTiger-Tools-main/Program/NSAdvancedScanner.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
RedTiger-Tools-main/Program/NSHostDiscovery.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
RedTiger-Tools-main/Program/NSHostDiscovery.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral9
Sample
RedTiger-Tools-main/Program/NSIpPinger.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
RedTiger-Tools-main/Program/NSIpPinger.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral11
Sample
RedTiger-Tools-main/Program/NSPortScanner.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
RedTiger-Tools-main/Program/NSPortScanner.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral13
Sample
RedTiger-Tools-main/Program/NSUrlDiscoveryCrawler.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
RedTiger-Tools-main/Program/NSUrlDiscoveryCrawler.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral15
Sample
RedTiger-Tools-main/Program/NSVulnerabilityScanner.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
RedTiger-Tools-main/Program/NSVulnerabilityScanner.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral17
Sample
RedTiger-Tools-main/Program/ODorkingQueryEngine.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
RedTiger-Tools-main/Program/ODorkingQueryEngine.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral19
Sample
RedTiger-Tools-main/Program/OEmailLookup.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
RedTiger-Tools-main/Program/OEmailLookup.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral21
Sample
RedTiger-Tools-main/Program/OEmailTracker.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
RedTiger-Tools-main/Program/OEmailTracker.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral23
Sample
RedTiger-Tools-main/Program/OInstagramProfileLookup.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
RedTiger-Tools-main/Program/OInstagramProfileLookup.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral25
Sample
RedTiger-Tools-main/Program/OIpLookup.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
RedTiger-Tools-main/Program/OIpLookup.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral27
Sample
RedTiger-Tools-main/Program/OPhoneNumerLookup.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
RedTiger-Tools-main/Program/OPhoneNumerLookup.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral29
Sample
RedTiger-Tools-main/Program/OUsernameTracker.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
RedTiger-Tools-main/Program/OUsernameTracker.py
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral31
Sample
RedTiger-Tools-main/Program/OWalletTracker.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
RedTiger-Tools-main/Program/OWalletTracker.py
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target RedTiger-Tools-main/Config/Utils.py
- Size 18KB
- SHA256 299bbe146bc286e618fc00daf5ed7a7559da145333323f76cfca471e178ed252
- MD5 2e2daa49026fea7b5d760aa2b3c34279
- SHA1 5a64b6a3ccf0572d8ffd3450f8c67ba099290389
- SHA512 a5cc524fcb85f20d9be95948cde779b2b610436b22ade6e21b5e90841d484f74cd73b576675ac7cd5abd39655a25a3c5ebc14999c30b810c5a2785a4ca5cd8fe
- SSDEEP 384:SN0Jhr+McDyc2BekSeHImltCXTbQl5p0TQmV63:SYhrrBlthtCjbQl5OUY63
- TLSH T16A82E529AB225533C373A39C686BC908A798BE4732053834B9EC07C15F5D179E5BA37D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RedTiger-Tools-main/Plugins/Example.py
- Size 4KB
- SHA256 2e49596979f2a15c6794f4cd304ef74c6221cc63c23699669744129f9c772b7e
- MD5 6b71391ed5b221a4a3c323fa5ba86dc0
- SHA1 462769a71accd62b8d5216cc32cfbbda198573a5
- SHA512 d73cf51e385975b244f3b6a0f500f39570b618bf4cc902be26cac8bbfa662704dbe02b1b42303dffb67f1e1fc69b064c94a478ddb8b1431714ac32e2edbb29bf
- SSDEEP 96:M9/RgQiy5GpzAj07spaiEkak0ioF4qURVaXZ8Th:ggQisG6j0AaiNak0iouq+Vap+
- TLSH T1F8811E056D0176BF04FAC6B1589D9692E370AA4B70C0681CB89FC0BC0F25669DBAF6C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RedTiger-Tools-main/Program/NSAdvancedScanner.py
- Size 7KB
- SHA256 040167ddd32dbe542b11abe0a861d9ee9f208054cc2ea1dab8ba3c7ddc778bf4
- MD5 9aa7986b1cd3e74cf574092f9bef4a82
- SHA1 ed8ab8cc888968d2934f585a0f64dc73d1fa1b0b
- SHA512 36b780a39e44d40ddbae13408160b871568a240493ce3f2c12f0468aa8459f507c0a7067fb8eabc77849361f022d02ccdf3d55fc6fa5cb797071e9c54467dfc5
- SSDEEP 192:oq/zn/ydCrRhwMd2NHpj6fAaff/qIAT9lOooxC/a/z4bADnXZ5fgMutUN/:oUdGVYSrXfqd
- TLSH T1F4F145D3B43175F78EEF927D216F0EA1FF806B0B5F49B491B4DD9C000B2522A941966D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target RedTiger-Tools-main/Program/NSHostDiscovery.py
- Size 4KB
- SHA256 916e11b7aaf74d1985931615bd47e3b0d1547f1010640b7a203a0625c5ead11e
- MD5 acceddeb6a391089c191857c8355ec83
- SHA1 a6a869181730961271e23d8de4120a4489df710d
- SHA512 4f3fd6cabe0f50e5268b1d4c6cb6698aaac7e839dd2d9469ba45416c4c318c793dc02f46ec3d724dca1d00245d980a797134ae3d5d7959492f8b394603a54f5d
- SSDEEP 96:xMeSHs7Ln15FLA8Jsn4RPqlI4wTKyQwp+6MNNJh3QxoDdNeEii:VSM7xHrJsIqlbx3Bd8O
- TLSH T1DDA1950D6B320555C7F7C51CB49AA365A32908974B473CADFD5C4A042F4273D857E3AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RedTiger-Tools-main/Program/NSIpPinger.py
- Size 3KB
- SHA256 7ac2874c4adbe90467b183b34b3c256207c8ad828d4e2a884911369706b1adc3
- MD5 32175685c9ce564e54f434059f2007e6
- SHA1 7ad516220e9dc17f6c5da004379b173e469a9a3c
- SHA512 0129843a0c6f905e7272c9a41251313e36b38aebcde98524c37c5013cb18db51bd883c487cfea250771ff3706022c2002e30a90e6094b8b3ab200294e4040449
- TLSH T12151211267160CE7DBF78458659646023B229D0F4DC3B535BAEC0A921FC793DC57A36C
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target RedTiger-Tools-main/Program/NSPortScanner.py
- Size 5KB
- SHA256 c0d689e403c692cbd2dca63926257f6abd00bc562328acd92951690dabfe049c
- MD5 a4dc7552dfb89081f992fb9de1ca7815
- SHA1 63c3503f58a9ada9b4ac9042c96ab2af0daa3119
- SHA512 a75782f6f2f9e1202d1970a257e9c45f662c8d488625f6fc94a7cd0842a9278ecbc050fc1fd278a143613ce35a1886d16723ed7798799649af9f809ea7d8795e
- SSDEEP 96:xNp4clqdgbhtMTKebp+O01oVb85yV3BhI3dHUtD2MXyHkuUVji4:Tlqu+85kWmV3
- TLSH T162C14642BA161BD683FF9654269832517B4C1E4FEA82743EBEDC87101F1A932D3C627C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target RedTiger-Tools-main/Program/NSUrlDiscoveryCrawler.py
- Size 5KB
- SHA256 1f20da7b45e442089e94688da984353b450871e475620db28e2938ac690b4f5e
- MD5 31fa4114882263b7d8cb9bda44484901
- SHA1 eaf75e009bd227013b20b2cf1703dfa7ca1162f0
- SHA512 245a2e8615adbb81a257f40e014d4a2286c1aa94c1b0b5adeebe712ca58849885a064e131a03655f8858d5de6c156922b1f21a1664d6596c4772ecdb24e241e3
- SSDEEP 96:xwj6EKXDZ2RIfj7KptDUhRTvHNzQpG6AvdqToSPvKV03AddNCPMXzwzwgi4:U6EKXDZr70DYDHNUctqc3vuYM8Y
- TLSH T1B9C152983A01A077C3DB836DF5A79545F324B90BAE0B7420B8AC45D40F4D626E6B17AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RedTiger-Tools-main/Program/NSVulnerabilityScanner.py
- Size 35KB
- SHA256 068e64537d63da7daaacb87e1ac646d46fdaffa59a24a6c0e7bdacbd37674c99
- MD5 31968492085fbc6b66394480cc896b65
- SHA1 3ddf8b066b8cf8c93b2c10623c7be76bb84073ba
- SHA512 edc69e69fb25cd64317fd05a8161a40a703863bcb54c631706edbe834e4bd94be3e99d624a1ed5f4e5b3faf5c60149c9357492a978e23286c1aff94631668190
- SSDEEP 384:JvIf/CSiziYCoKHJT9YFIdFIUMdFZGlHF37XqhilohSFFLG7/VTw/kTTwmJfyz/o:Y7A41GuuSlLlohSFFabRaITwmJk/hX+
- TLSH T19DF27456A4063422CBC7E59DA4B74D01FB35B4133A062574FDBC471C1F19A6AE3B2A8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RedTiger-Tools-main/Program/ODorkingQueryEngine.py
- Size 7KB
- SHA256 334449564e99cf5f8eebb3b5093eec8784e4a8296ca914f86a2b938dbb844a71
- MD5 f1ef1594ba77aaacbd88a7ee84d90537
- SHA1 61ec116c44f9e4cea91961a4e677c14ec68856b6
- SHA512 7ae59bf2c50f039f611ae47f61aa412d24886cd3f672734966b0235a51dc653a6f97e2801427f99032e0bd80a9587a5d9ed08a7c01a54631742f4190e4e07dde
- SSDEEP 192:tbVzLFdjx/gu26ioHiRKbarT3lKgeaFshp:tbFLjx/T2AmT3peaFKp
- TLSH T149F1033EA16564A343E7C01DAFF0A067F905AB6348107469BF6D810C6B8D16AF7B23DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target RedTiger-Tools-main/Program/OEmailLookup.py
- Size 4KB
- SHA256 e207da0ac82972dcbccd976030b34c66182ddc465574553426fe2a31f98df339
- MD5 a405c20a796d9d12a436a93c90fa5b6c
- SHA1 f6059be98a2a5696cef72c4c35d20be5380eb987
- SHA512 50c7fcf5cd8df257960b340680f5abdd77d2ce3cb1a84a8fb785a9e6c82d556e5c2ef8b94d6ab335634c58ac3c9769c7e0663ea7b5ad738541f17246c987aafb
- SSDEEP 96:xhPibDIRnpmFxIR7IRpSVIReRl4w8ggMTKebp+OeKga1ornTi4:+ApmFxA7ApWAM3kn
- TLSH T1FC81F2189D2024F3AFF6876D346FB1417633B9170E509835BAAC4A840F62A397C716FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RedTiger-Tools-main/Program/OEmailTracker.py
- Size 10KB
- SHA256 90719a76eccc64e31beda9f5066fa58d066c60bbc0954b367a37bac640d1f160
- MD5 727bc65b2664d80e6400b6cb9752c497
- SHA1 121954499a826b711f7043bb268c179f95b7d92b
- SHA512 0e67bac65faf222ee6edb84dd4263f5cd304c9c81796f92e33fe9feab1b3706a958517e91e910c6ab762779b1540c69998ac9a6c4fde2be0692ca984b3a18273
- SSDEEP 192:d8Ffy+29CJzRQK3sxxjPkLfc4QfsxxjPBlWWe2Ewuvwi+:d8Vy+AK3sxxjPkcsxxjPBlJ
- TLSH T183221081FD92A862C7D2C1E860735A40F366960BAE4A7468F4EC055D2F8CD39B1BD3CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target RedTiger-Tools-main/Program/OInstagramProfileLookup.py
- Size 4KB
- SHA256 235076dfecde51eedf1086422a275319bf3cce2352e8dae4597489f80249b385
- MD5 82b8851e3f5bf9e2b50e4b70539ff383
- SHA1 3f68d93023add335e19f056c0e37dfc5f9c87de7
- SHA512 def2df38284b3d5e4ee484e47b9a0a0c5efbb04de63fc621c21fc7725d0f8047e0a83da274970aee2131d0763e5d7cbe1b5a49040f333c290e07d81e3c249198
- SSDEEP 96:x9GksR/+BkjtVxSKJu36mM65RICVacyLjXi4:MzVx7Ju+6LOckH
- TLSH T147912F0BEA9A48B347366D0879F312219384AE07BD1B7411B0FC098D5F4FE5922E1A7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target RedTiger-Tools-main/Program/OIpLookup.py
- Size 2KB
- SHA256 2c1b03521d5194ba0b11078ed3bef43f80471a903ded7f88d30515049c086f38
- MD5 da75349acdc718d17ff173bac36dcdf1
- SHA1 cf67de66efac9c7031b67d974ecb8a2b65c28d98
- SHA512 86e00821e1d26a71f4502e3afd9f55a0aaebd29beed82f15c59d4c2c6a535f49ea133094a5da322fe0284fdb6883f7c261bca1fb805dea62fc5a11dd562e2ba4
- TLSH T13341DE91631250B6C3EF475EB4AB4781F344F90B7E2B706978EC4DC59F0861325663AC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RedTiger-Tools-main/Program/OPhoneNumerLookup.py
- Size 4KB
- SHA256 c1bb3d689111d768359616ef41713028d3055122374eb9d33307e2e733b01bf9
- MD5 85055b15b7d179f1d3993416a7dd0af4
- SHA1 4f521da3dfcc61fdf37d41ebe02e455cc2e6ce99
- SHA512 1ed1775636ff895c6546582053a4b4aae8773d6c37bd33f26e92eda02ea89d516dc3d72d18b6210bc107acde3e59f5aec48f19c53cd85df619bc02e10701c53d
- SSDEEP 96:x1urXoFpouC3o4nSR1OZVEVxIT66HsBM6bAJLgpg2BkaVHJXHhi4:yjono7okSR1OZuh6HP6bA+5ka9JX1
- TLSH T18991AB16B71098339B9253862C66E00D4114DF07AD89583E7EEC93871F1362E76F2EAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RedTiger-Tools-main/Program/OUsernameTracker.py
- Size 5KB
- SHA256 12a250f5f60cf59885b49a7640377f424dd8e8c6d156de900d144c6b916f5bb6
- MD5 a399f0f5d26df3880a3c8426c29c57ef
- SHA1 9cd4d71c7a2d69a37bf74aa8505239aa7e51ce40
- SHA512 d6c0a289e6407b58518654a5f3f14713b0a1480bcee1c58093e6f5c3b982e8999d827d29901b7b2916de59af2f779be8910c11c0384507f55dd7d9beb45bde92
- SSDEEP 96:xRO3L7xVwabzN8XDos8bzNCKYqwoKVSH82YmDXbcuBw3y6QZi4:nO3Lsv2Dh82V7wuBwi6q
- TLSH T15BB1EC259326C457E3B3861DB9F7A2117B35E507BE13A024F8DC86C44FE226081E27AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target RedTiger-Tools-main/Program/OWalletTracker.py
- Size 9KB
- SHA256 913936d2369ed188d710fc84419b061ec0337a8461b90f3eb22eab6402d98b16
- MD5 345dfb709af6d7044df02abf952f8b75
- SHA1 e1ff2d65f69d4c71c54c0cba130bd4963bfd9f25
- SHA512 6301b8f9c55e17a5a1104b3d6610da37a985e3db21e1cb6228563a950d172d995c5d1ba2acc205a8a05b302dd724623719431c9867a7f26a002c4cbe83669855
- SSDEEP 192:hvLrTR2xWGWW8vV55rB5u49CV1CObK/29T0Wsj2ByTNC4mFZhPTi9:hTr/twC529Kj2BSmFZhPT2
- TLSH T1FC1234A57E112421C3C751ACA8B75A81B768E58B7A1C3864FC9C8AC50F6D837E273398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10