efbb47e14cf53336a5f1eaecc091277ffd634deff523861b043cc1fa418001ff | Triage™

Login
Reports

Overview

overview

5

Static

static

3

R6 Recoil/...ule.js

windows10-2004-x64

3

R6 Recoil/...ule.js

windows11-ltsc_2024-x64

3

R6 Recoil/...er.vbs

windows10-2004-x64

5

R6 Recoil/...er.vbs

windows11-ltsc_2024-x64

5

R6 Recoil/...es.vbs

windows10-2004-x64

5

R6 Recoil/...es.vbs

windows11-ltsc_2024-x64

5

R6 Recoil/...rm.vbs

windows10-2004-x64

5

R6 Recoil/...rm.vbs

windows11-ltsc_2024-x64

5

R6 Recoil/...se.vbs

windows10-2004-x64

5

R6 Recoil/...se.vbs

windows11-ltsc_2024-x64

5

R6 Recoil/.../l.dll

windows10-2004-x64

1

R6 Recoil/.../l.dll

windows11-ltsc_2024-x64

1

R6 Recoil/...AGE.js

windows10-2004-x64

3

R6 Recoil/...AGE.js

windows11-ltsc_2024-x64

3

R6 Recoil/...om.dll

windows10-2004-x64

1

R6 Recoil/...om.dll

windows11-ltsc_2024-x64

1

R6 Recoil/...om.dll

windows10-2004-x64

1

R6 Recoil/...om.dll

windows11-ltsc_2024-x64

1

R6 Recoil/...uth.js

windows10-2004-x64

3

R6 Recoil/...uth.js

windows11-ltsc_2024-x64

3

R6 Recoil/...w.html

windows10-2004-x64

3

R6 Recoil/...w.html

windows11-ltsc_2024-x64

3

R6 Recoil/...uth.js

windows10-2004-x64

3

R6 Recoil/...uth.js

windows11-ltsc_2024-x64

3

R6 Recoil/...dex.js

windows10-2004-x64

3

R6 Recoil/...dex.js

windows11-ltsc_2024-x64

3

R6 Recoil/...ule.py

windows10-2004-x64

3

R6 Recoil/...ule.py

windows11-ltsc_2024-x64

3

R6 Recoil/...ole.py

windows10-2004-x64

3

R6 Recoil/...ole.py

windows11-ltsc_2024-x64

3

R6 Recoil/...le.vbs

windows10-2004-x64

5

R6 Recoil/...le.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
R6 Recoil.zip
Size 115.6MB
Sample260808-dgcwjagm41
SHA256 efbb47e14cf53336a5f1eaecc091277ffd634deff523861b043cc1fa418001ff
MD5 bbf4debf795918e007c8ea013655201b
SHA1 a0074ee0543692916b4943422c1a3a8320fd4c11
SHA512 0b2a3927ac1a53e90db7ac0f9530cc572039b6ae72ae00006dbf0ef1fb40b06d99de1c078b92a3889e3d638aabdeb286e0c465f701488cce4ea55dab275fd288
SSDEEP 3145728:vgf9QpOeGjpO4z1ohCxGDB0GxRFcvZPt3H1oGQofwTonYZAxhic8On:o1QpOe+pO4BkdbruB1mTRZAx1Tn
TLSH
T1A94833EDCAA4C7A6FC7A6632E9A31C12C630D70481E27D7D09561FF68B432D7960B50E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/CGAuth_Module.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/CGAuth_Module.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Properties/Resources.Designer.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Properties/Resources.Designer.vbs

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Properties/Resources.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Properties/Resources.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Select_Form.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Select_Form.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Test_License.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Test_License.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/Newtonsoft.Json.13.0.4/l.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/Newtonsoft.Json.13.0.4/l.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/System.CodeDom.9.0.9/PACKAGE.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/System.CodeDom.9.0.9/PACKAGE.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/System.CodeDom.9.0.9/lib/net462/System.CodeDom.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/System.CodeDom.9.0.9/lib/net462/System.CodeDom.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/System.CodeDom.9.0.9/lib/net8.0/System.CodeDom.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/System.CodeDom.9.0.9/lib/net8.0/System.CodeDom.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example JavaScript/cgauth.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example JavaScript/cgauth.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example JavaScript/preview.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example JavaScript/preview.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example PHP/CGAuth.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example PHP/CGAuth.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example PHP/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example PHP/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example Python/cgauth_module.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example Python/cgauth_module.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example Python/main_console.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example Python/main_console.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example VB.NET/Example/CGAuth_Module.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example VB.NET/Example/CGAuth_Module.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/CGAuth_Module.cs
- Size 18KB
- SHA256 29346fe2e1c40c114db3c1e1e6eedd81c9b63a1a626f271a7ff767b2d5ef6220
- MD5 c983128fbc4f0775386298f9dee48dcc
- SHA1 16b97282b4308d17b1a7d913008287cc4de9ed48
- SHA512 cac27ef1bd31f70121e7deaf142079e0005f0b5bf5ff342b222fb49111fc6c2ef7175173003975b7c54d27a6d36114dfaede37ea1f7da929dc890b0c82d54837
- SSDEEP 384:KN/mGteThcH4K2WRvQgyJyKqWmt6qZ9pXpWmt6qZ9N:2BteTQRv1DKqWmtb9dpWmtb9N
- TLSH
  T15992734178A2E9624FD350B19786B0807325E21733A9ED65F8CF47448F05B3D5BB8AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Properties/Resources.Designer.cs
- Size 2KB
- SHA256 9e3666472ce8cbff23d81477560c8bca556fda32347658bca2ba4beac5595538
- MD5 2ba961e551ea3a316326649c25def8fd
- SHA1 97234b024248997f14c33353edc5222290867d17
- SHA512 289662399bb0e78041227a46bc51cdd73c12545b16732c1883a1717e3452586433cc5efd7b6134f31799ed3f2dd39ec06ac81a79740f8fa651784b770e1f0785
- TLSH
  T12251CCB74FE9C5320826D89F4B01F851CB665113C67CD834F8AF02689FAB35443ADAA9
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Properties/Resources.resx
- Size 5KB
- SHA256 4e124f5a7694ffe813c60601b1b73c53e47536b1f1c0e798d4d55bfc2ca3774f
- MD5 c07716633f086d91759ae32a18996a1a
- SHA1 bf3383c20acf6e64ce49f120938456161e5f6cb9
- SHA512 c6ad0ec603ff69d2d1b787db9426f29d44ea1ba45cf1d2b7ec41cc2bd6d5c93af8d2299139cc1c5d10d56718f36daa37d544f8d5411fad91a72efc2e70454cdf
- SSDEEP 96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFE3qxdRMvDTursrbLAy202W:Zf+tLPfYnLvFVOiFQaUR6
- TLSH
  T1E3B12045F2D5DD220AD3483CD64139847BA8923B4234AC94B4DC961E5F93F86A7B33FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5 behavioral6
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Select_Form.resx
- Size 5KB
- SHA256 4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6
- MD5 96ba0a444d087ae06f32319ca4f0a3e4
- SHA1 e3e08973b3d47c1ad51ccb133315b6242e275f0f
- SHA512 571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb
- SSDEEP 96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut
- TLSH
  T172C11E45B2D1ED260E93483CD65139847BA8923F0234AC94B4DC961E5F92B85A7B33FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/Example/Test_License.resx
- Size 5KB
- SHA256 4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6
- MD5 96ba0a444d087ae06f32319ca4f0a3e4
- SHA1 e3e08973b3d47c1ad51ccb133315b6242e275f0f
- SHA512 571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb
- SSDEEP 96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut
- TLSH
  T172C11E45B2D1ED260E93483CD65139847BA8923F0234AC94B4DC961E5F92B85A7B33FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/Newtonsoft.Json.13.0.4/lib/netstandard2.0/Newtonsoft.Json.dll
- Size 700KB
- SHA256 12246aa5e14245cbd1a0b8794851defd46e6d782c60eb650ba5aa90ef8447eee
- MD5 2cc71cd67ebd96a883b43d42ad139dd4
- SHA1 420b9c95d22126470efd9e36c258ed3b727dcc19
- SHA512 7ef62b6e50d1bd095c58a2e201a57b9ad3b4adb36206c4fff755e40bc945717714287b4b43d91a7f82da57a275b2b4381ce9cbf13b63386f925673f39de7157e
- SSDEEP 12288:SFFow+ae8lSx7ONG6KV3UB5tFwoOxRLD+f2d192gunTBDy46uF9KTkHf:oO2e8lSpJkA92nTBDy464
- TLSH
  T1E5E4491223E88B1AE1EF5735B47489180BF5F51297FBEB4F4604E9AA1C83B544E943B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/System.CodeDom.9.0.9/PACKAGE.md
- Size 4KB
- SHA256 ecdded225410ccd8fd685978d24d14b363e8412cd9f449b20959cd3d38c01496
- MD5 35e2cab1b5af7b1a8784f4058d189113
- SHA1 a4809cf2ee69b8502f231e34e085b822ba5cb328
- SHA512 8d79972e27ad0e5024a1588a8681c6bf5c6a9092d6284f661ef41188d9fc98a122988d58e22f5a61420a04431b444ae9aaa65d43b9f4ada9ad3c92934eb2abc5
- SSDEEP 96:YYFRswIaInv6+H/4D4NvnYWtfxg0p7lIe2zPHvEbNXfnEbShnJd+FtI8PIpAJ8+w:ZFwQMBvg0p7Se2PHvEbNXfnEbsrw8h
- TLSH
  T1859163BA5EC847BA2113D0571A89D1A4C779521ABA088C673C8C4611B783854DA3FFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/System.CodeDom.9.0.9/lib/net462/System.CodeDom.dll
- Size 29KB
- SHA256 1c8f266efafda8458536753d5b87322bb60c11a9a0ab6d97f2deacae084df30c
- MD5 ce242bfd1fef5dc27263bc44755a6484
- SHA1 6105d953fbc0094b59ae9ef181440312c1bc68ef
- SHA512 2ecf9c4322bbaf1038d2b4da1d7d3436c9772a8b8dc7dec8adee2f865c3cfc0751388823e829982b6de3ea3eb414e504f5f3eed4d9db65ea9363a6aaef7fa32b
- SSDEEP 384:uVaz4VsDYLcTPWi3h8241EEtYW0uuBxehzsCtZ7U6rtk2VyxvWpuW98fLXmztvGJ:sK2ETjaveEtYahzZl2jQta88DY9z
- TLSH
  T1B2D24B6193EC4ABBEFBB0B3075B7C1D50FF9B2D32425D62E1544A4091AE2BE04532776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example C# Sharp/packages/System.CodeDom.9.0.9/lib/net8.0/System.CodeDom.dll
- Size 179KB
- SHA256 2828025c93db88424a011071883badff2bedc0f9f85a3f4d3067343d28a5171d
- MD5 21b3f235f51e7efe7a6f5a11a84a76c3
- SHA1 79f13a04aa9d587264471893cbd7f9ce00793e47
- SHA512 8ea5a95245324a684a8c0e0451a7d6b56ae06ab21afbd4995380fd5722055f63ba937368a39077f814e3d51dbd834a551906ca58d2d31305fedaec126af8dffd
- SSDEEP 3072:/MKminLBDcR+s0sK1eW0d5PIlwbrebRYSH+lcQh1U3Qsd:DLBk0szhebCSKPmQ+
- TLSH
  T191042A6437FC8376E7AE6274F028092146FCE44E7283DB5A8D8955F55E23740EE20B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example JavaScript/cgauth.js
- Size 17KB
- SHA256 5bab5a20911cf7199af4751fbd6e5b2297804370e1c8a15021c43dce3537152a
- MD5 534ff55fc6e2a57291b4724f38b3859b
- SHA1 0863edde396e4c3bb151d68072d7994b9c666254
- SHA512 c57d5eb1e5ec89f722749098ef4973b9e29f903de9ae09a90bfb7998b72352589d199c814bf3f9dfe5412ee7406760bed02fc6f0168fb47865446eb25a332b7d
- SSDEEP 384:MLJcgIkDZA63CVFXTwcIrgVprSJwuVadkjX5uVprSJwuVadkjXh:MlcgIkDZA63CVFsc0g7SJg6o7SJg6x
- TLSH
  T14D8261822CF774914FE740F19B63B151B228F10B3794DA597A8E4B100F0676A9F366EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example JavaScript/preview.html
- Size 9KB
- SHA256 ead7a80b9c0a2594a35386d8435ef2e03d1f96f99888ac1309f862a65bb43b74
- MD5 6dd24c17086c179998f2e54900140a9d
- SHA1 349509bf768e31dba0ab3493fa4c6baeb6242164
- SHA512 731a6181a8fccd2e03728ba5044f6fea82a79023d314e5d11571acbca0d18bed8a5528737da7e6f7f9c561f2ce61f5a2a05d6555be3b6fcbb19ac36d4ae9e7cb
- SSDEEP 192:4bXONPd6t8sqUq9KInW2zp4WNKS+vkyfFDa5v9ba8yc:+Ym4PHnW2qWOvG
- TLSH
  T12D12739521F91873878360B99357239B3D31F10BAA4E4980385E5FA01F96F41DABB7CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example PHP/CGAuth.php
- Size 17KB
- SHA256 b09709a29c22d04798a3a5e60cb4da91b47d8d2cbff8927640c4fa06e8c2a9e2
- MD5 a4fa961156e77fdcd35b1a77c52c6f95
- SHA1 38c9398988148730413597b5f30feacfd00d04f6
- SHA512 0f7e234c8e263ca39e56935498c72d8d214ab89d2a40ba6b9db9d0b82d245230bf306bc5a2745fc7803da1c06fa6f8dcf8a886a14195f8527a698c70a13a99e9
- SSDEEP 192:UKLOcSDBoOHsSJRCl5NSXIQGeHhK0BiKO1UTSmSQ/PZnSc3LuQKW+r06SnAfSxBr:O/JocO9mNHZnJLuQK+RAu7QK+RAu4
- TLSH
  T1F38263A13CD364618B9350B96717B511B3A9D21B3788DA11BECD03941F8573CDBB4AE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example PHP/index.php
- Size 10KB
- SHA256 741c59339765c8d9e78ad437951aba897b8597092ebd3aae24dc077a379bfb97
- MD5 b3d2331a3f9941cbce318cb3230c3af0
- SHA1 aea5f0ddad1629c0fc216edb80e1f24cb0890c7b
- SHA512 acc751cec2d1f577d2377ba528bf8f463b80337fe0a46478e3667759e85892f98fea6f26ecd22ac830cd42c6e88d98f153dce1dd99953d130dda4bc1f39109ca
- SSDEEP 192:Gmu07QhIsPNURbAOxXzV7TAqDqYsrBsBU2Tc+2kyh0FDZ5g9CCIc:5u0sh211h7W7BsBUe8dB
- TLSH
  T17822939560F528638793607C678A628B3A21E10B964D8A803CAC5FA41FD6F54DEB73C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example Python/cgauth_module.py
- Size 15KB
- SHA256 d17a3ea3a79f673ff562d16d28c19bc41b7b05aa4bbc7adfd473b8d11624d650
- MD5 9d0eb8396da551c83070b32b2bf73f5b
- SHA1 f680427de1f20917c5dd7634749267549702681c
- SHA512 110dfbddc31bfab6c4d9f21cfba965e91569bd69752becd563fee12b7222b7ca1cf5abc788a57d4ed410938ca9d49b9502b3bd9d8da1aae58c787630b421c4f0
- SSDEEP 192:yRogczESzfmUSubBOpCPME5K81mmxX3L+JkuYQ8Rz9D3onqu1oOwIzI4PpkiYQz7:MFv7uFOZExMWnfJ1Yvu7wJf5u6
- TLSH
  T1E3726043EC9068DAC387D0F198269D5273A4E80727851E3DB9EC824D1F057BAD6F25EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example Python/main_console.py
- Size 3KB
- SHA256 f2a016abf879109c5983dec2e6870184a5395f451ad33c73dc422ade504b62e5
- MD5 94019026841e4b870a8e01482c2951b0
- SHA1 5746c50891e9ccec02824d774398a8087aeb8701
- SHA512 e161c333e1f06311f8f5fb285e13aa402d56a57d4d8fbc9429b5a24344c9bdbc32e4267b32e3498f5a12a41426dfbf1d5adc8805f8676e0d72cf933b065ee3e3
- TLSH
  T17F71DC829C411CA283035D7CDE098189166F7E2786FD3874F86D94C81F60237E7A1DBD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  R6 Recoil/CGAuth-Project-main/CGAuth-Project-main/Example VB.NET/Example/CGAuth_Module.vb
- Size 16KB
- SHA256 566a972c802a0174bf3de472b42f1eba49462ee0c0bd4918dd397c6a2e2ab9eb
- MD5 bc2027b8763e2217dec3727b0e60c255
- SHA1 b1d4708b5d26114383f1ce974da8b67263432d5e
- SHA512 5389294436fb8e6e3f98425594a548f2e8f2b62d3d2d63be0cc2cb0a0c26543f5b8aed6598563399ba51d84ed07d5529c017b4c1e32fcea046f2a94735563441
- SSDEEP 384:3m2eNhyiTRjlxghYoJUn6KGoVfRmZcZXx:3veNhy9p8GoVfRmZcZh
- TLSH
  T11E7295A37C93687107C706936D1690B077A496273255B521F8CC08894FD67FAA33ABBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Visual Basic

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy