LittleTigers — reviewed investigation summary

Reference-assisted review, not native model output.

Bobby Tiger’s workstation (10.0.90.215, BOBBY-TIGER-PC) downloaded test1.exe and f4.exe. The recovered hashes exactly match the publisher’s Remcos and Dridex payloads. The reference also describes distinct follow-on communications. The native summary accurately records the two transfers but stops before explaining the two-malware incident.

Native result: partial. Remcos/Dridex identification and their later communications are omitted; neither recovered file appears in the short IOC list.

Official answers · Frozen native report · Exact comparison