redtiger_stealer | d6d239245353d1d9e4be1c161e5948448f3d319aacd8418a924b9a04cd471a2c

Sharing

Copy URL Twitter E-mail

General

Target
RedTiger-Tools-main.rar
Size 3.1MB
Sample260925-yytwlawbph
SHA256 d6d239245353d1d9e4be1c161e5948448f3d319aacd8418a924b9a04cd471a2c
MD5 06125246411ae8702f52974176df01ae
SHA1 bdc11afdaadb8a8baf1fe100f50d298f3c9e8dd4
SHA512 c2acd5a1f211332c0a5f6976ca42fd9102d59ff7439f79e2d051913177100f6abdf11bf62daabdd583a186987b84d6111ae5b70149f0dbea5627c3d03de5c17b
SSDEEP 98304:CAAvW+yL/Bj/4FxfqVAinwQ+DsFFWE3F05:jkW+WBQ/iAinssFFW3
TLSH
T150E533C54A30911331477BFAD933AB0FFB4430839DAFD5526AA2B8AAF74F7495526803
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  RedTiger-Tools-main.rar
- Size 3.1MB
- SHA256 d6d239245353d1d9e4be1c161e5948448f3d319aacd8418a924b9a04cd471a2c
- MD5 06125246411ae8702f52974176df01ae
- SHA1 bdc11afdaadb8a8baf1fe100f50d298f3c9e8dd4
- SHA512 c2acd5a1f211332c0a5f6976ca42fd9102d59ff7439f79e2d051913177100f6abdf11bf62daabdd583a186987b84d6111ae5b70149f0dbea5627c3d03de5c17b
- SSDEEP 98304:CAAvW+yL/Bj/4FxfqVAinwQ+DsFFWE3F05:jkW+WBQ/iAinssFFW3
- TLSH
  T150E533C54A30911331477BFAD933AB0FFB4430839DAFD5526AA2B8AAF74F7495526803
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  RedTiger-Tools-main/.gitignore
- Size 41B
- SHA256 6dc78a8dcf0fe2edbd6ecff7e6f01b8db4fc280b651c8aaed7921591b5ad2277
- MD5 0054c36e1df83f50097a4a9edc89985c
- SHA1 309f130e6aa40b969d423bd21ab82a6e722cecd6
- SHA512 9595d801f3dd61594bc6724e61439d01032947d555baded653c0f604cc5ece93d72be5cd5b26e88629e14663d0b48773e05447ed186602f13db124c8f67ca947
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral3 behavioral4
- Target
  RedTiger-Tools-main/1-Output/DoxCreate/DoxCreate.txt
- Size 26B
- SHA256 4b1d9559f376251953d91c263b82f4a8dd6ccd2b70538d01311d6ae48b3dc4f2
- MD5 3271a7b7e700b6ffdb3e747baaf9f8ae
- SHA1 0dd0823f04733fcb958f6a1e87baf0db413cd330
- SHA512 1659509d98e0e11e4498077ef44e9d97104c399ef30e9f508088754e84188435eafaafb2157eb429a9f8e7c734afa0ba65006802cb6330eb7e858fe2d943e68d
- MD5 SHA1 SHA512
Score

1^/10
behavioral5 behavioral6
- Target
  RedTiger-Tools-main/1-Output/PhishingAttack/PhishingAttack.txt
- Size 35B
- SHA256 36c972527b54d2bb901d0d9866d395c771400f88c0d7102254e87a0ff34a83c8
- MD5 1d73383cf0ef8e9ec2f368d12199ca64
- SHA1 8cfe4467b6f7795fcb40697d8b6d3ecd6f5d20b3
- SHA512 8db5b67697be2023a7188f5aa19ebd86d58153d7a85d51ece5c3ac5331f648d28f5f95c37dc33f72d108aa8ca4cd856c275a56eb6d657a0d1d4f0a0b057b0588
- MD5 SHA1 SHA512
Score

1^/10
behavioral7 behavioral8
- Target
  RedTiger-Tools-main/2-Input/Headers/UserAgent.txt
- Size 108KB
- SHA256 d47c3e872d45453e0aa0c39fdba384b269d48b18825f9dcf80080904fd832660
- MD5 a9bd491ae4d4e486aed04d06e5ea5938
- SHA1 32c67f9ca806355dac5a62f2863dfa94ca1c1090
- SHA512 7bc7e9a1447a25875eb6d5406a303827fc2c5f031ee6ce16eab935b157fdbf00d04d60b039ee803ca76d606768bec21222b7980edc35662bb3280708a3d085f2
- SSDEEP 384:+Vyfd3K85+0RGDv8Vw9NF2OJb8d+45kyypFsxKA5tapSfVr+iPLTfrlbFHDD:3lQ0mw75gpFIjfr9FjD
- TLSH
  T1BCB36C27C3254898B22808C2217731D0ED9A937FA8EA31D3F9520D51BEA9D5F15BBFD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  RedTiger-Tools-main/Img/Builder.png
- Size 39KB
- SHA256 309749758814f85b31c5f974cfe97b5912ef341f5f65702b0910181b2e19de68
- MD5 0d82098d0736f449c3622df4c17ea957
- SHA1 feab4ea0f568f579fbbd887e678f650962e1a972
- SHA512 2a8503ab120e8adf9599baf129598666a2a393598d8877b240b04e5364042cd1e2438f4575bf8139115d63d10fa25c0ee0114aa4367169b462d8069ad603a21e
- SSDEEP 768:E1iTdgaP5cZzz+mPcYvwB27u9JILRB/632tL0lXPeAC81dovnczymlqRZ5:PtcZzS4m2EJItYGtLYX26oPu+5
- TLSH
  T1B203BF591A22657CCDD227379A51F0782335AA3875EF3F7BEB6CC5463B80483D05788A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  RedTiger-Tools-main/Img/Python_Path.png
- Size 139KB
- SHA256 616900d1dae6015c200ec74d52eb5f7a3b5b2de3bbb77406f5b1ac462d6d3658
- MD5 42f952eb0a8fa081e65d2f5a74099459
- SHA1 863b24617ba8aef57617cb6d702f775a9f02d077
- SHA512 2add163a65d306588f911ca9e537829ac482f2850d68606fa860f29756041033269d282802598f4234d23374f3912136b3a27ddc7af292284f4f118dc0af7dc2
- SSDEEP 3072:hHNSupeEJJTSF6FINXU74NIuODHuQruNrdyfS0tGwLWUqBLg4ckUm3y:htSubJ+Fmu7iu+38yq04wLiLW2y
- TLSH
  T15EE313C242848834F71FA62FB0445D462395D2FBF952D1A8ED63513E623C5BF2473A72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  RedTiger-Tools-main/Img/RedTiger-2.png
- Size 66KB
- SHA256 5ca5abd2fe6c6c0928f92c43ada768a6015e4f1a84693b866d52c173a0f28eac
- MD5 24483452b2470a8ea280df22a5202c1d
- SHA1 3132d68fe5efa200cf778b560df496aba513ef98
- SHA512 1c913ba714de9f7b2106c711f4ef7afc2724797b45c2150f8471bc7c0cbbab498519d74da68c03a8e3f818a10289964f05352279b263c3f95d1e5abf60b0490b
- SSDEEP 1536:ligU/XG7iPPPPDr8aYTT1C1TcvL+aUHqtoD:+XGmPPPPkftGagqts
- TLSH
  T13663CEE9E5747395CEFC08F2D8890CDC1D6F6C14462F99ABE8B7854F62309C4D6A2938
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  RedTiger-Tools-main/Img/RedTiger-3.png
- Size 86KB
- SHA256 c401dea733a0f197ef49c77a3424d3dd40a3580fd03f5323988ab26644f49c59
- MD5 65178a03d39a1b72e4682a92f036eb6d
- SHA1 b0fab6df3878fe613b2932a09eef49b39449429f
- SHA512 def539cb91053ac05165dcfe2d2254652907838b3c959cf1e9f62314c66a243eac39fad4651d5b21318346f089a1f2a093a033d6d594861d6f1f5923932d7ceb
- SSDEEP 1536:a1IGIJYRNTCzOaF49F7AP0aICwbLw5LNEIVEfLbDnoJz+mamEzWC6E:a1JUYRNTCSC47wbwlLfoobzWm
- TLSH
  T1D793C0601C53A1A5DC8E05F9A48B8EDD28360FF597351FFBB7B40A2C3D179816B2A271
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  RedTiger-Tools-main/Img/RedTiger-Banner.png
- Size 2.3MB
- SHA256 624f75a798409f015ed1eaf8209f25d25ac79cf30a4753645b73e788ce53912a
- MD5 3a57adc64eb4f025ef68f2211dd4be13
- SHA1 bc5610e2bf8d101008a26133c778f9e89e1a1066
- SHA512 d39ada4241b6c9cb6dab8fdb2269967cdcc267a5f8b19a19f84ca4c9f98b405c6e080d318fc9a70a05938cfdf0fe7157d8f576c60f4f9af0e6af79f5a13e6495
- SSDEEP 49152:wVqZwfnLA4l8G/QslLYi47d0ZDBwsJlDckf/p7SIhu4ZK:docy8aL3Ginxcuhu4c
- TLSH
  T18AB5334AC57ED173A6C7A879BC91FFDE3E7BE02390C5FA705A96361D1000D2B84C8699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  RedTiger-Tools-main/Img/RedTiger.png
- Size 84KB
- SHA256 23e2a7146ad0dcab363aacc0620d2dea2790bdbb73f1f68ee95181bfa921cde2
- MD5 6987517f64090b67e6390a88427083f3
- SHA1 a9a2986c15d6f611404a31b9bbe5018de0df6ae2
- SHA512 5ef3354c4dc32a9f535380bd0b8688c57291381ba38c53e4509a283984217846dc45b64eacc976b61427bedbbb398b25ca3c158eeab43a4eea3380f6eabe0ed1
- SSDEEP 1536:gYYYMgMYYw2uGm5pLlxEKWhSPRC+7sIqg7tOKVwSnEBRNvSz:gYYYMgMYYtlm5xlXPRj7sIL6Nl0
- TLSH
  T1E883E0826D1AC381EC4D877A80D5B04704D089EE3A349E3675BA04B5CF537FFE5BA869
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  RedTiger-Tools-main/Img/RedTiger_Logo.png
- Size 262KB
- SHA256 afbcc564a22de1f19ef93db48a0547c910e2156e3091f84f0c174ebe3ea12cfd
- MD5 5c5c9ffdafbd203858116ce29538a9a7
- SHA1 aaa4e6c1d69782657757d5c5bc679bd31b6876be
- SHA512 8341c5763e5ac735a42ecce88d163bc041bc3e7e36bde82cd0d444e970580aed588b5febd80983ff844509dec7d6837d7cd3428c36128c855a11ef9828343b04
- SSDEEP 6144:34ifsutTD3PSm5xLSYosXRC4+e7h1NxVXXYWdvJw5RUXx:Iik2HxxRXY4+m1TOEJw58x
- TLSH
  T11A442363E3CC26FB87C580881FE4E195264B8AD4F7B0C3DA497368D612C5A57077E227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  RedTiger-Tools-main/Img/RedTiger_icon.ico
- Size 50KB
- SHA256 e70c3c19f0fcaa2fc503c0dd96532f106ad7e38c1494c5528df0842d5ff96ee6
- MD5 83f20375638262fa8afbd74296219779
- SHA1 d3c8d6d40c0b56841d40e5a50452446608951ce8
- SHA512 e54b0874714e8db47f905a7bd1840fddca5bba36ac3e7d048c5c910416e69a1cd8859bc74f0e6e600a51e7165ef835d32166a85612e336345a9b96a9b30da76a
- SSDEEP 768:zTelSEnFzFJHOYX8vWMtCmblEdmQa6r1d64eUIg0DZ9dwm44UhfMdnu2:WlSEnFFFbxOlqm5IDHeUd2nXUpkx
- TLSH
  T18F33F2DC49C83A7BBBB042704F54A0DDA7B402916CF65E9FA236E3A3D105D1BC9E610B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  RedTiger-Tools-main/LICENSE
- Size 34KB
- SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
- MD5 1ebbd3e34237af26da5dc08a4e440464
- SHA1 31a3d460bb3c7d98845187c716a30db81c44b615
- SHA512 d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686
- SSDEEP 768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:Fhcycsrfrnoum
- TLSH
  T15FF2835FB74413B2018206A26A9F68DEE319D03A73664095785DC15C27B3E3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  RedTiger-Tools-main/Program/Config/__pycache__/Config.cpython-312.pyc
- Size 901B
- SHA256 aec227f20dd8947fb2d2014f467abbd254d759ed327e29c62c46b0644f5c1d64
- MD5 cdc1ad6c1a8b8314b1ad2a1dedada63f
- SHA1 c39a441b3a880010ece17c5f27b27d9c4d884ad9
- SHA512 e0a690c3377e4b21b41246718084ba60646099e8aea737eefa918eb88a21f0feb0d5fb9f188b5a916f1645b3639a3f23fd5a6854d3640898e0e9c0af7da64c5d
- TLSH
  T19D11DCCFB520D8C7CF7E0EBAB51527058C82A5F56B8A5649291A7268CC3D1A135F3982
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  RedTiger-Tools-main/Program/Config/__pycache__/Config.cpython-314.pyc
- Size 892B
- SHA256 e325b671d8faa0e1debfe0bfd1f3dbd8bc264dc3eec220509de4fb6e250c0269
- MD5 9d039efadf6bb80db1c25de86607bc6e
- SHA1 c4d6331890d97ae3ee42fc7a9ec76b1d7326c6bf
- SHA512 4acfaceded7d36c4c1867d01847ad6be42a555c4eb4f945e73bd446d07aff6d3807a7dc76e13c962eeb8402519f6bfaa3604d9519394f5546d3ccc001d8ecf0e
- TLSH
  T1481144CFB410E4C7CF7E0CBFA11553098C43A9F16787664614193228DC7D1E235B3981
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32