c1bf91056af25e53c026977b007f604ce626f7fbf7dc1567345be5fde9a51449 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

RecoilMaster.exe

windows10-2004-x64

7

RecoilMaster.exe

windows11-ltsc_2024-x64

7

R6EXE.pyc

windows10-2004-x64

3

R6EXE.pyc

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
RecoilMasterEXE.zip
Size 17.9MB
Sample260813-b5248ahn7s
SHA256 c1bf91056af25e53c026977b007f604ce626f7fbf7dc1567345be5fde9a51449
MD5 58b1ba33e3b3e2a83ce27ae809019bb3
SHA1 bb7a4bed998eed3dd73f3b239187b6b3fcd34cbc
SHA512 8fd9a4bdf1ba02826c870119d89d507a393254371138a23f12b709807549a9e38d3d8eab9eaa124f887a509684f0a5d8069dc6f88b53ac4011a4802b44cdfde3
SSDEEP 393216:Z86MfJDC32RtoAR4MwJxoF8uIGzcjNV7DkOo8wv:Z7MRDC+toAR4VxoXcjroD
TLSH
T1591733FBE9254FDD725FC2B2A3424360B400FE2792C5786D1FD76F971909EA88632588
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution pyinstaller trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

RecoilMaster.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

defense_evasion discovery execution trojan

Behavioral task

behavioral2

Sample

RecoilMaster.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

defense_evasion discovery execution trojan

Behavioral task

behavioral3

Sample

R6EXE.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

R6EXE.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  RecoilMaster.exe
- Size 18.2MB
- SHA256 76be4d94ebe6a8af715233a8fdf5975d9ec8078e46476afb50e1867ff27efd92
- MD5 a40aa5a0997578b6146deddab9cf2b0d
- SHA1 bc60d540d4c62c2a10ba6c22fdc66b8acc1cea89
- SHA512 35005cfb28b49ebba55d4a5b379acf57c37c38496e6fcc1720841204a5d543eff44fdd7bccaf238b3c018a2b71b228b9b0b254d974276d999917cd2bbfdd4b6f
- SSDEEP 393216:f/m3pRbMW8BfAzdQ2l6+9J5aC2hXxJG7dwogu:fKRbMW8BfAzdQm9JP2hWyo
- TLSH
  T19D17338AA7451CD9E8DF5276D6C2C270B6A3782103A9C28F0BF85D550E9B5E4EF37B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  R6EXE.pyc
- Size 6KB
- SHA256 96f3fd1b8883070b27e8ece500a02dd22ddee3807ffb792f2e08ba0fb5ab2e16
- MD5 832d45d4f5052ad4b83aad524e9aa0fd
- SHA1 fa831a5360337cccbafc249bcb10a3ba3031d712
- SHA512 1a991661aa55a04fd6d0b8979364db5da3eb9ac48247a329c76528e5c07bd005da6022d070dcea79840fd34840d7be49e378cc965517aca491f64c80da9b30c8
- SSDEEP 96:X+0HovdD1psnnnnVnguEehVZq0AZzlWIlLiGqJU7oaYqQLLVTe1T:O9BsnnnnVngcfq0kxsO7vpIw
- TLSH
  T113D1C982774395BBFCA4A7BAC459279773B4C3F0E2259B0729E5D02D8D847942D131CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutiontrojan

behavioral2

defense_evasiondiscoveryexecutiontrojan

behavioral3

behavioral4

© 2018-2026

Terms | Privacy