d6d239245353d1d9e4be1c161e5948448f3d319aacd8418a924b9a04cd471a2c

Login
Reports

Overview

overview

Static

static

RedTiger-T...in.rar

windows10-2004-x64

RedTiger-T...in.rar

windows11-ltsc_2024-x64

RedTiger-T...ignore

windows10-2004-x64

RedTiger-T...ignore

windows11-ltsc_2024-x64

RedTiger-T...te.txt

windows10-2004-x64

RedTiger-T...te.txt

windows11-ltsc_2024-x64

RedTiger-T...ck.txt

windows10-2004-x64

RedTiger-T...ck.txt

windows11-ltsc_2024-x64

RedTiger-T...nt.txt

windows10-2004-x64

RedTiger-T...nt.txt

windows11-ltsc_2024-x64

RedTiger-T...er.png

windows10-2004-x64

RedTiger-T...er.png

windows11-ltsc_2024-x64

RedTiger-T...th.png

windows10-2004-x64

RedTiger-T...th.png

windows11-ltsc_2024-x64

RedTiger-T...-2.png

windows10-2004-x64

RedTiger-T...-2.png

windows11-ltsc_2024-x64

RedTiger-T...-3.png

windows10-2004-x64

RedTiger-T...-3.png

windows11-ltsc_2024-x64

RedTiger-T...er.png

windows10-2004-x64

RedTiger-T...er.png

windows11-ltsc_2024-x64

RedTiger-T...er.png

windows10-2004-x64

RedTiger-T...er.png

windows11-ltsc_2024-x64

RedTiger-T...go.png

windows10-2004-x64

RedTiger-T...go.png

windows11-ltsc_2024-x64

RedTiger-T...on.ico

windows10-2004-x64

RedTiger-T...on.ico

windows11-ltsc_2024-x64

RedTiger-T...ICENSE

windows10-2004-x64

RedTiger-T...ICENSE

windows11-ltsc_2024-x64

RedTiger-T...12.pyc

windows10-2004-x64

RedTiger-T...12.pyc

windows11-ltsc_2024-x64

RedTiger-T...14.pyc

windows10-2004-x64

RedTiger-T...14.pyc

windows11-ltsc_2024-x64

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 20:12

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

stealer redtiger_stealer

Behavioral task

behavioral1

Sample

RedTiger-Tools-main.rar

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

RedTiger-Tools-main.rar

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

RedTiger-Tools-main/.gitignore

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

RedTiger-Tools-main/.gitignore

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

RedTiger-Tools-main/1-Output/DoxCreate/DoxCreate.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

RedTiger-Tools-main/1-Output/DoxCreate/DoxCreate.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

RedTiger-Tools-main/1-Output/PhishingAttack/PhishingAttack.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

RedTiger-Tools-main/1-Output/PhishingAttack/PhishingAttack.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

RedTiger-Tools-main/2-Input/Headers/UserAgent.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

RedTiger-Tools-main/2-Input/Headers/UserAgent.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

RedTiger-Tools-main/Img/Builder.png

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

RedTiger-Tools-main/Img/Builder.png

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

RedTiger-Tools-main/Img/Python_Path.png

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

RedTiger-Tools-main/Img/Python_Path.png

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

RedTiger-Tools-main/Img/RedTiger-2.png

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

RedTiger-Tools-main/Img/RedTiger-2.png

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

RedTiger-Tools-main/Img/RedTiger-3.png

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

RedTiger-Tools-main/Img/RedTiger-3.png

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

RedTiger-Tools-main/Img/RedTiger-Banner.png

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

RedTiger-Tools-main/Img/RedTiger-Banner.png

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

RedTiger-Tools-main/Img/RedTiger.png

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

RedTiger-Tools-main/Img/RedTiger.png

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

RedTiger-Tools-main/Img/RedTiger_Logo.png

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

RedTiger-Tools-main/Img/RedTiger_Logo.png

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

RedTiger-Tools-main/Img/RedTiger_icon.ico

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

RedTiger-Tools-main/Img/RedTiger_icon.ico

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

RedTiger-Tools-main/LICENSE

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

RedTiger-Tools-main/LICENSE

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

RedTiger-Tools-main/Program/Config/__pycache__/Config.cpython-312.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

RedTiger-Tools-main/Program/Config/__pycache__/Config.cpython-312.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

RedTiger-Tools-main/Program/Config/__pycache__/Config.cpython-314.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

RedTiger-Tools-main/Program/Config/__pycache__/Config.cpython-314.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Report Analysis Logs

General

Target
RedTiger-Tools-main.rar
Size 3.1MB
Sample260925-yytwlawbph
SHA256 d6d239245353d1d9e4be1c161e5948448f3d319aacd8418a924b9a04cd471a2c
MD5 06125246411ae8702f52974176df01ae
SHA1 bdc11afdaadb8a8baf1fe100f50d298f3c9e8dd4
SHA512 c2acd5a1f211332c0a5f6976ca42fd9102d59ff7439f79e2d051913177100f6abdf11bf62daabdd583a186987b84d6111ae5b70149f0dbea5627c3d03de5c17b
SSDEEP 98304:CAAvW+yL/Bj/4FxfqVAinwQ+DsFFWE3F05:jkW+WBQ/iAinssFFW3
TLSH
T150E533C54A30911331477BFAD933AB0FFB4430839DAFD5526AA2B8AAF74F7495526803
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5012	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	5012	7zFM.exe
Token: 35	5012	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5012	7zFM.exe

Processes

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RedTiger-Tools-main.rar"
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:5012

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads