c17b33d94d376d2ca267ebd0070bcfa2063caa0048290f638abbebf2ab722c37

Sharing

Copy URL Twitter E-mail

General

Target
RedTiger-Tools-main.zip
Size 2.8MB
Sample260710-ddz7nacv2l
SHA256 c17b33d94d376d2ca267ebd0070bcfa2063caa0048290f638abbebf2ab722c37
MD5 942955ca63bf4cf3cfe55aae3ed59a04
SHA1 32b6bcf56772465ba1f11b6a97a95c2f050c194b
SHA512 eeb84f93065e01fc81819a89f2288af41f8fdfa5f0895911a7abf02d5b535108f6e0aece98376f822ea68c85d76d8034c70ca016c4bc464ded146ab3866f7dbd
SSDEEP 49152:fcxdZxi6r0R6Ln879tDVg9Mln/8iD0KlgyrZmotNvKyAWAZNu8sKuGNKILdua1T+:csEs0yNmQin+WNK41MEonhASKm
TLSH
T1FED533DFEE765D92E2C99CB8B511FAE4F93BD83DE06BD6B24B03766A4086107121C14C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  RedTiger-Tools-main/.gitignore
- Size 52B
- SHA256 3718f9f885cd0c0a076d4079bfcee258e7985e7ff6808fc9c559fcd076f0eabc
- MD5 5dc3c1b51bdf4bccd9540b7614bac14a
- SHA1 9ac99b98f1b563ceb7068a4542864e43b79bba8f
- SHA512 85ec6c538731d3c8642f19446191f3f112feed229ca45707d58aa85b7fe9ecafabe4c623673900bad554bbd2cb8081f950053b9eaf5cf4b79a671d2848bf68b4
- TLSH
  T19E9004537D44D00C41103F04FC4551C4D0DC15C107F55F5314107D41C00DF51137F550
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  RedTiger-Tools-main/Config/Credits.json
- Size 319B
- SHA256 0b9af051fa7d3d0c32774c49019be9e798b7a9d6c2e2a9e6e7f131bc70cb1b7c
- MD5 adf69487736b123fca5641d2c4db2c08
- SHA1 b0b6d2a255a5f8875869d99acaf5c6184c020ddb
- SHA512 d51c08708cc331fb69e00e7a36668d07383ba86ce344db2426b5f28ca517272fee9793534b22d60e17762c7c3d08796edf380d65936f53a1ee0037a0eb6e075f
- TLSH
  T191E0868EF4205CD367E908426506284649036217868CF9093F12671C8BADA7F94F3409
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  RedTiger-Tools-main/Config/UserSettings.json
- Size 68B
- SHA256 730fa7d9d014b94f69a1f2ba860af9d0e87036be6891c9fc6478f43cfdd951be
- MD5 420d25d4960ef4fc087672f811c43610
- SHA1 6282e2be281535aa506a9caaae2cbdb6121ea11e
- SHA512 5eb37991135e819ebee8cb831b85459ce7d0993f2065350baf7e764e1765a715d600570b9f35e64a04dc69fb5439cbd5796d43254b50ed294a8d501138917fda
- TLSH
  T143A00218CC05FDF7300E2664A055CCD3036010930442120E239E00CD5FF9FED70AD91D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  RedTiger-Tools-main/Config/Utils.py
- Size 18KB
- SHA256 299bbe146bc286e618fc00daf5ed7a7559da145333323f76cfca471e178ed252
- MD5 2e2daa49026fea7b5d760aa2b3c34279
- SHA1 5a64b6a3ccf0572d8ffd3450f8c67ba099290389
- SHA512 a5cc524fcb85f20d9be95948cde779b2b610436b22ade6e21b5e90841d484f74cd73b576675ac7cd5abd39655a25a3c5ebc14999c30b810c5a2785a4ca5cd8fe
- SSDEEP 384:SN0Jhr+McDyc2BekSeHImltCXTbQl5p0TQmV63:SYhrrBlthtCjbQl5OUY63
- TLSH
  T16A82E529AB225533C373A39C686BC908A798BE4732053834B9EC07C15F5D179E5BA37D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  RedTiger-Tools-main/Data/DefaultParameters.json
- Size 447B
- SHA256 67e410002ef43f1a32447fef85bfcc9957c2fbe4a77ada1b53f947992b225d8d
- MD5 f8fe18ab452e958dbd0ab1b8aa24afbe
- SHA1 f29108c44ad799a99e749689fcc4a75edb16be02
- SHA512 c8d12bbee5ce668d6292ae3faf6909efa974f5c65ffa674666c7333588e898a72990451f7439543d21d3da700197e110fbb13da554522f9f6dca655aef6d84a9
- TLSH
  T1A0F06D31B473DCB642E4032C1D628F91E798DE0E22A0319DAAD70D47070D64001F6F0B
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  RedTiger-Tools-main/Data/DefaultPorts.json
- Size 6KB
- SHA256 4e8f00b17ba0f4a0ab0f6c36d81b39978d816985f95bc0aa0c618ce20371ca1c
- MD5 3364166c39cae73c3cbb858868c0d208
- SHA1 5216ba653eecfaa43c83e863c327a1e1db5d22d8
- SHA512 4fcb013aae4b8b8238810a1df8ec8edf08c334f0e3e1889b647fd6cfbcb5231146659f14c9d502ab843bda8abda7a8d1167f3c323febde05650687f4966e4752
- SSDEEP 96:8iGUa+pBk3uj8yiI/Ubma/p4Bn1wuEOzmDDoAKBuFYRsb5JHoiGyMVkcxIh:7GAnj4nI/USMq1sJfoTBuFYRsvHoib
- TLSH
  T1ABD1AC5E098E86A97717AC8413C2140FCB6DA32F2A2DAD55F39E5AD57F0FCCC59E2801
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  RedTiger-Tools-main/Data/Ports.json
- Size 145KB
- SHA256 5846f2c728cac1a6724609342a911b42e46714dacca882c0cf1cb4c486d33ed5
- MD5 bedaec1368819afaa433261424d077ee
- SHA1 72c93c0de3aa36217e70194714ad6327676c0576
- SHA512 7cf10d646cc8c6a09768cda11c0c3019659622d00f5bd5da2153a32fe968f22415d76ccbf67608d58f14eb12eefda1715a0846f9cd59e8580c9e1a3826358e80
- SSDEEP 3072:h//KOEZdn5VPJQA7t8WR1rTmj0N4b0Nd65aouVoVc+ba:ZKOEZdn5VyA7t8srTmj0mb0NowLcc+m
- TLSH
  T1D4E3BBB5CD070EDB1D9CD64478922602AD8499235F80B94FB388068D1FAE51F78FAE7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  RedTiger-Tools-main/Data/UserAgents.txt
- Size 107KB
- SHA256 b0a2078c810320c418e0516c8ebe46f62238c77c9f0e8810169a4922a5c1f9ef
- MD5 835bb2f605d2c4bb5596226090b19f39
- SHA1 a5338a5620d14222ab3ac5ab1be5100c6093cb86
- SHA512 47610de83d9dffc7461ab3d042365801e51c406f75fa1af9c4df5902316d5ee37264d121ce70975fdac14daca5d60011cb4e216edc65b3bf830527e9aa8493fa
- SSDEEP 384:+Vyfd3K85+0RGDv8Vw9NF2OJb8d+45kyypFsxKA5taKSfVr+iPLTfrlbFHDD:3lQ0mw75gpFIifr9FjD
- TLSH
  T11CB36D27C3254898B22808C2217731D0ED9A937FA8EA31D3F9520D51BEA9D5F15BBFD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  RedTiger-Tools-main/Plugins/Example.py
- Size 4KB
- SHA256 2e49596979f2a15c6794f4cd304ef74c6221cc63c23699669744129f9c772b7e
- MD5 6b71391ed5b221a4a3c323fa5ba86dc0
- SHA1 462769a71accd62b8d5216cc32cfbbda198573a5
- SHA512 d73cf51e385975b244f3b6a0f500f39570b618bf4cc902be26cac8bbfa662704dbe02b1b42303dffb67f1e1fc69b064c94a478ddb8b1431714ac32e2edbb29bf
- SSDEEP 96:M9/RgQiy5GpzAj07spaiEkak0ioF4qURVaXZ8Th:ggQisG6j0AaiNak0iouq+Vap+
- TLSH
  T1F8811E056D0176BF04FAC6B1589D9692E370AA4B70C0681CB89FC0BC0F25669DBAF6C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  RedTiger-Tools-main/Program/NSAdvancedScanner.py
- Size 7KB
- SHA256 040167ddd32dbe542b11abe0a861d9ee9f208054cc2ea1dab8ba3c7ddc778bf4
- MD5 9aa7986b1cd3e74cf574092f9bef4a82
- SHA1 ed8ab8cc888968d2934f585a0f64dc73d1fa1b0b
- SHA512 36b780a39e44d40ddbae13408160b871568a240493ce3f2c12f0468aa8459f507c0a7067fb8eabc77849361f022d02ccdf3d55fc6fa5cb797071e9c54467dfc5
- SSDEEP 192:oq/zn/ydCrRhwMd2NHpj6fAaff/qIAT9lOooxC/a/z4bADnXZ5fgMutUN/:oUdGVYSrXfqd
- TLSH
  T1F4F145D3B43175F78EEF927D216F0EA1FF806B0B5F49B491B4DD9C000B2522A941966D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  RedTiger-Tools-main/Program/NSHostDiscovery.py
- Size 4KB
- SHA256 916e11b7aaf74d1985931615bd47e3b0d1547f1010640b7a203a0625c5ead11e
- MD5 acceddeb6a391089c191857c8355ec83
- SHA1 a6a869181730961271e23d8de4120a4489df710d
- SHA512 4f3fd6cabe0f50e5268b1d4c6cb6698aaac7e839dd2d9469ba45416c4c318c793dc02f46ec3d724dca1d00245d980a797134ae3d5d7959492f8b394603a54f5d
- SSDEEP 96:xMeSHs7Ln15FLA8Jsn4RPqlI4wTKyQwp+6MNNJh3QxoDdNeEii:VSM7xHrJsIqlbx3Bd8O
- TLSH
  T1DDA1950D6B320555C7F7C51CB49AA365A32908974B473CADFD5C4A042F4273D857E3AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  RedTiger-Tools-main/Program/NSIpPinger.py
- Size 3KB
- SHA256 7ac2874c4adbe90467b183b34b3c256207c8ad828d4e2a884911369706b1adc3
- MD5 32175685c9ce564e54f434059f2007e6
- SHA1 7ad516220e9dc17f6c5da004379b173e469a9a3c
- SHA512 0129843a0c6f905e7272c9a41251313e36b38aebcde98524c37c5013cb18db51bd883c487cfea250771ff3706022c2002e30a90e6094b8b3ab200294e4040449
- TLSH
  T12151211267160CE7DBF78458659646023B229D0F4DC3B535BAEC0A921FC793DC57A36C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  RedTiger-Tools-main/Program/NSPortScanner.py
- Size 5KB
- SHA256 c0d689e403c692cbd2dca63926257f6abd00bc562328acd92951690dabfe049c
- MD5 a4dc7552dfb89081f992fb9de1ca7815
- SHA1 63c3503f58a9ada9b4ac9042c96ab2af0daa3119
- SHA512 a75782f6f2f9e1202d1970a257e9c45f662c8d488625f6fc94a7cd0842a9278ecbc050fc1fd278a143613ce35a1886d16723ed7798799649af9f809ea7d8795e
- SSDEEP 96:xNp4clqdgbhtMTKebp+O01oVb85yV3BhI3dHUtD2MXyHkuUVji4:Tlqu+85kWmV3
- TLSH
  T162C14642BA161BD683FF9654269832517B4C1E4FEA82743EBEDC87101F1A932D3C627C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  RedTiger-Tools-main/Program/NSUrlDiscoveryCrawler.py
- Size 5KB
- SHA256 1f20da7b45e442089e94688da984353b450871e475620db28e2938ac690b4f5e
- MD5 31fa4114882263b7d8cb9bda44484901
- SHA1 eaf75e009bd227013b20b2cf1703dfa7ca1162f0
- SHA512 245a2e8615adbb81a257f40e014d4a2286c1aa94c1b0b5adeebe712ca58849885a064e131a03655f8858d5de6c156922b1f21a1664d6596c4772ecdb24e241e3
- SSDEEP 96:xwj6EKXDZ2RIfj7KptDUhRTvHNzQpG6AvdqToSPvKV03AddNCPMXzwzwgi4:U6EKXDZr70DYDHNUctqc3vuYM8Y
- TLSH
  T1B9C152983A01A077C3DB836DF5A79545F324B90BAE0B7420B8AC45D40F4D626E6B17AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  RedTiger-Tools-main/Program/NSVulnerabilityScanner.py
- Size 35KB
- SHA256 068e64537d63da7daaacb87e1ac646d46fdaffa59a24a6c0e7bdacbd37674c99
- MD5 31968492085fbc6b66394480cc896b65
- SHA1 3ddf8b066b8cf8c93b2c10623c7be76bb84073ba
- SHA512 edc69e69fb25cd64317fd05a8161a40a703863bcb54c631706edbe834e4bd94be3e99d624a1ed5f4e5b3faf5c60149c9357492a978e23286c1aff94631668190
- SSDEEP 384:JvIf/CSiziYCoKHJT9YFIdFIUMdFZGlHF37XqhilohSFFLG7/VTw/kTTwmJfyz/o:Y7A41GuuSlLlohSFFabRaITwmJk/hX+
- TLSH
  T19DF27456A4063422CBC7E59DA4B74D01FB35B4133A062574FDBC471C1F19A6AE3B2A8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  RedTiger-Tools-main/Program/ODorkingQueryEngine.py
- Size 7KB
- SHA256 334449564e99cf5f8eebb3b5093eec8784e4a8296ca914f86a2b938dbb844a71
- MD5 f1ef1594ba77aaacbd88a7ee84d90537
- SHA1 61ec116c44f9e4cea91961a4e677c14ec68856b6
- SHA512 7ae59bf2c50f039f611ae47f61aa412d24886cd3f672734966b0235a51dc653a6f97e2801427f99032e0bd80a9587a5d9ed08a7c01a54631742f4190e4e07dde
- SSDEEP 192:tbVzLFdjx/gu26ioHiRKbarT3lKgeaFshp:tbFLjx/T2AmT3peaFKp
- TLSH
  T149F1033EA16564A343E7C01DAFF0A067F905AB6348107469BF6D810C6B8D16AF7B23DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32