Analysis
- user interaction
yes - max time kernel
28s - max time network
27s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/08/2026, 00:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Recoil.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Recoil.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target Recoil.exe
- Size 1.5MB
- Sample260802-aj461sam2x
- SHA256 8a329c239bcf8c95bd08b0b235a45d6a699cb7e7b86d05f85b4a76067d26024b
- MD5 dfccbee2aa6f884e4d45b8f87770710b
- SHA1 ef46e9c76ea0f16efba5440c4c51b400bb764cda
- SHA512 e1127d25c4d51b907d2e3bbd93d25f705228df6b83d2d0f1278b28638e464a4082fb9c060fb14cfa60262483845890f261a5a05611d3f75087b1d6dc7a9b2704
- SSDEEP 12288:YTerheRTeRlsiiUl+pRRMYmeV8hXU0xOxUp8Dk6LM0YJhYpeiyAxUp8D4WdfMNg3:0uB+PrV8hk0+YzUTNZqiPvRpmL1
- TLSH T1EC75AF13F722439CC61A7838D6A1C35BB7353C506F15E28B72E92A949EDB1F01EE62D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4116 Recoil.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4116 Recoil.exe 4116 Recoil.exe