Analysis
- max time kernel
150s - max time network
110s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 02:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
R6NoRecoil (1).exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
R6NoRecoil (1).exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
General
- Target R6NoRecoil (1).exe
- Size 16.7MB
- Sample260702-c73dfahy2j
- SHA256 a9bb850d6519253c723399e14408e1a973b8978efafee5d2df8ee734ef3d50d7
- MD5 5340169a4f5052ff9629dde6a19d1c9a
- SHA1 264414eae8b7371d65f7660e35a3dacd8fb074de
- SHA512 2a47eee0a005acb67c1379bfbccf796d773811711a4d17a0e4977364bb65fbac86fc90c01b95eed2b051c8e1498b8d10fac200861917b8cb71b3f593c59a25be
- SSDEEP 393216:h+ER4mLnPAPMSGkv4PFqbJ/TGonJkF2rsMe:ceV2MMbrJkF2ry
- TLSH T16707CF06B3F802A9E1BFC278C5724517EBB2B8451721E7DF119486A92F33BD05E39762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 5820 R6NoRecoil (1).exe - Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 raw.githubusercontent.com 2 raw.githubusercontent.com - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5820 R6NoRecoil (1).exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\R6NoRecoil (1)\szu+HCrMqrzorFKTWWKLtxi3EYrYbOA=\cimgui.dll
- Size 1.4MB
- SHA256 60ec992bcebd354d59f235ed97cdc3b0eea62c2def53c4a71f22937e500fa80b
- MD5 7225d6dafc75934427c75401a2093b1c
- SHA1 2f8dff8ed737b9277ca77f4f155d89b5eb034428
- SHA512 74454f45172df9ad303b86d12e1e2e4c61f0af22e61c78fc552965b28e0ee3a9924ff5525aa1b54cb675644c3ed5fd9a1a78705650233370290245230a0a7f81
- SSDEEP 24576:dxpSt6hFfYauZMAijqVBeF0oC8Rv2YISRCmudelw5K39YPMNi+nZoLKWdZCL:HFQau7AMBeF0xxBSruUr39YPMc+nGKRL
- TLSH T1AF659E8AA3F500A8E0BBA174D566A71FE6B1786017308ADF03D4019D5FB77E052BBB53
- MD5 SHA1 SHA512 SSDEEP TLSH