Overview

overview

8

Static

static

3

R6NoRecoil.exe

windows11-21h2-x64

3

UpdateTool.bat

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    R6NoRecoil.zip
  • Size 2.5MB
  • Sample260803-bt3avawblc
  • SHA256 1d1ab664bc98c9ba5ab4ea0f3c1e9e300ffb0fa59ddc3ab1ae71ba4eef474f2e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecution

Malware Config

Targets

    • Target
      R6NoRecoil.exe
    • Size 179KB
    • SHA256 72bc2b4cc3b4082e1795951f5ee2da7dc336528f5c4e1dd401e0ee8d3d653dc0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1
    • Target
      UpdateTool.bat
    • Size 4KB
    • SHA256 8b1f246458d50a0554e509ffac2bd295df2582a3f5aab99aa5fc45c0f1c42713
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    execution

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks