General
- Target NoRecoilR6.exe
- Size 95.6MB
- Sample260808-2svsgszvgz
- SHA256 fa4b279c78f4281aba46fefcf6c4d3d121aaeff9ae44d0a7db4ee85b386c45a9
- MD5 9315d2127eaef943c90fe606071643cf
- SHA1 2672d71f3c37221f6b95abc2aba03836fc3c3c36
- SHA512 6c85bceca9663400dda7af346b93bd1faf3fc81ae52364f90e1e7ffda3e680773f29ba42737990c2397e3a95147cd3845ba98cb708c7a8d78a874a7e934e9792
- SSDEEP 1572864:uh8wrrXdzr8odM2Wu3Ws1i4LB2vFUtQaFrVQystZnApwApZbDOpvvAUT:uFrrZ/XiaLlsDApwmZ/+AU
- TLSH T1A228DF2EA65059A79297F8476C469D1161E0490F14EAF683B87E213ECF47ED62C32FC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NoRecoilR6.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target NoRecoilR6.exe
- Size 95.6MB
- SHA256 fa4b279c78f4281aba46fefcf6c4d3d121aaeff9ae44d0a7db4ee85b386c45a9
- MD5 9315d2127eaef943c90fe606071643cf
- SHA1 2672d71f3c37221f6b95abc2aba03836fc3c3c36
- SHA512 6c85bceca9663400dda7af346b93bd1faf3fc81ae52364f90e1e7ffda3e680773f29ba42737990c2397e3a95147cd3845ba98cb708c7a8d78a874a7e934e9792
- SSDEEP 1572864:uh8wrrXdzr8odM2Wu3Ws1i4LB2vFUtQaFrVQystZnApwApZbDOpvvAUT:uFrrZ/XiaLlsDApwmZ/+AU
- TLSH T1A228DF2EA65059A79297F8476C469D1161E0490F14EAF683B87E213ECF47ED62C32FC3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE