General
- Target RecoilMaster_V1.2_[unknowncheats.me]_.exe
- Size 11.1MB
- Sample260701-ejfkwafy5x
- SHA256 1c0b6595549d4fb8d7fdfa21b33a81b406de84ea80343892cf24d1f65d5c3503
- MD5 d14af32518b35019a6602da5f5d22e12
- SHA1 a03c34d7e274dbb347139156a264fd15ce1d912a
- SHA512 54bc2f1ad563d2727dcf1b832bb42a3e0f40a2e581e3bdfd4a628eb11cda30f60f78d24ab012008c265e8d99ac1c13e0961a7d839a5b8e6ca2fbd2f3674f78aa
- SSDEEP 196608:+0KFuMlY0W8UA51wmwurHfP/XRLO/uAqMVVbrCTZn2KKKC:YFuGW8Z1wmwuLXsWAq4tuC
- TLSH T1AFC633B8379945E5F99EA33DD8C290A396D5B1260B98C19787F05AF10E632C4FE32353
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
RecoilMaster_V1.2_[unknowncheats.me]_.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
RecoilMaster_V1.2_[unknowncheats.me]_.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
recoilmaster.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
recoilmaster.pyc
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target RecoilMaster_V1.2_[unknowncheats.me]_.exe
- Size 11.1MB
- SHA256 1c0b6595549d4fb8d7fdfa21b33a81b406de84ea80343892cf24d1f65d5c3503
- MD5 d14af32518b35019a6602da5f5d22e12
- SHA1 a03c34d7e274dbb347139156a264fd15ce1d912a
- SHA512 54bc2f1ad563d2727dcf1b832bb42a3e0f40a2e581e3bdfd4a628eb11cda30f60f78d24ab012008c265e8d99ac1c13e0961a7d839a5b8e6ca2fbd2f3674f78aa
- SSDEEP 196608:+0KFuMlY0W8UA51wmwurHfP/XRLO/uAqMVVbrCTZn2KKKC:YFuGW8Z1wmwuLXsWAq4tuC
- TLSH T1AFC633B8379945E5F99EA33DD8C290A396D5B1260B98C19787F05AF10E632C4FE32353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target recoilmaster.pyc
- Size 11KB
- SHA256 09f50210c5cf3efeceae853fd784719d0258486c6d86404f43c60abd08c44040
- MD5 74cc08c730ad5995c226656083d2bcbb
- SHA1 502bd17ead8da09d619cd6e3ed5e97a5bac37338
- SHA512 da88353281753f790f1948ee77f7b9445b2a48dff582f82a343ca8cf9530309357f8f2bc8bb2d8a993cfddc0ad8e569aa247d6067f073b728973699987516649
- SSDEEP 192:s+qYobrL4X5et0NhSJLKMTaGlDKEz9RwpYVFEn42K4p+Sj7OLHCdy5lZ:sLbrY5o0NKKMTq+7E42v7OLiwF
- TLSH T17E42C089494C1252EC16C9F83B135BB86F02E52FF069B483EE4DA91487C856763625CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.