d988b0ccaae03ef57e5dd9ca3da74afbe7aee6bc6581f09ebcf69d64700572c2

Login
Reports

Overview

overview

Static

static

RedWing-Pa...server

ubuntu-18.04-amd64

RedWing-Pa...er.exe

windows10-2004-x64

RedWing-Pa...er.exe

windows11-ltsc_2024-x64

RedWing-Pa...nux.sh

ubuntu-18.04-amd64

RedWing-Pa...nux.sh

debian-9-armhf

RedWing-Pa...nux.sh

debian-9-mips

RedWing-Pa...nux.sh

debian-9-mipsel

RedWing-Pa...ws.bat

windows10-2004-x64

RedWing-Pa...ws.bat

windows11-ltsc_2024-x64

RedWing-Pa...une.so

ubuntu-18.04-amd64

RedWing-Pa...une.so

debian-9-armhf

RedWing-Pa...une.so

debian-9-mips

RedWing-Pa...une.so

debian-9-mipsel

RedWing-Pa...une.so

debian-12-armhf

RedWing-Pa...kgj.so

ubuntu-18.04-amd64

RedWing-Pa...kgj.so

debian-9-armhf

RedWing-Pa...kgj.so

debian-9-mips

RedWing-Pa...kgj.so

debian-9-mipsel

RedWing-Pa...kgj.so

debian-12-armhf

RedWing-Pa...mod.so

ubuntu-18.04-amd64

RedWing-Pa...mod.so

debian-9-armhf

RedWing-Pa...mod.so

debian-9-mips

RedWing-Pa...mod.so

debian-9-mipsel

RedWing-Pa...kha.js

windows10-2004-x64

RedWing-Pa...kha.js

windows11-ltsc_2024-x64

RedWing-Pa...ast.js

windows10-2004-x64

RedWing-Pa...ast.js

windows11-ltsc_2024-x64

RedWing-Pa...nds.js

windows10-2004-x64

RedWing-Pa...nds.js

windows11-ltsc_2024-x64

RedWing-Pa...ice.js

windows10-2004-x64

RedWing-Pa...ice.js

windows11-ltsc_2024-x64

RedWing-Pa...ata.js

windows10-2004-x64

Analysis

max time kernel
0s
max time network
139s
platform
debian-12_armhf
resource
debian12-armhf-20260127-en
resource tags

arch:armhfimage:debian12-armhf-20260127-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
21/08/2026, 02:59

Sharing

Copy URL Twitter E-mail

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

RedWing-Panel-main/bin/linux/server

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery

Behavioral task

behavioral2

Sample

RedWing-Panel-main/bin/windows/server.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

RedWing-Panel-main/bin/windows/server.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

RedWing-Panel-main/install-linux.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

19 signatures

150 seconds

antivm credential_access defense_evasion discovery execution persistence privilege_escalation

Behavioral task

behavioral5

Sample

RedWing-Panel-main/install-linux.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral6

Sample

RedWing-Panel-main/install-linux.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral7

Sample

RedWing-Panel-main/install-linux.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral8

Sample

RedWing-Panel-main/install-windows.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

RedWing-Panel-main/install-windows.bat

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

RedWing-Panel-main/source/decom/apk_smali/lib/arm64-v8a/libcputune.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

RedWing-Panel-main/source/decom/apk_smali/lib/arm64-v8a/libcputune.so

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

RedWing-Panel-main/source/decom/apk_smali/lib/arm64-v8a/libcputune.so

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

RedWing-Panel-main/source/decom/apk_smali/lib/arm64-v8a/libcputune.so

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

RedWing-Panel-main/source/decom/apk_smali/lib/armeabi-v7a/libcputune.so

Resource

debian12-armhf-20260513-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

RedWing-Panel-main/source/decom/dropper_smali/lib/arm64-v8a/libxoafgxkgj.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

RedWing-Panel-main/source/decom/dropper_smali/lib/arm64-v8a/libxoafgxkgj.so

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

RedWing-Panel-main/source/decom/dropper_smali/lib/arm64-v8a/libxoafgxkgj.so

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

RedWing-Panel-main/source/decom/dropper_smali/lib/arm64-v8a/libxoafgxkgj.so

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

RedWing-Panel-main/source/decom/dropper_smali/lib/armeabi-v7a/libxoafgxkgj.so

Resource

debian12-armhf-20260127-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

RedWing-Panel-main/source/internal/api/antichernukha.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

RedWing-Panel-main/source/internal/api/antichernukha.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

RedWing-Panel-main/source/internal/api/blast.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

RedWing-Panel-main/source/internal/api/blast.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

RedWing-Panel-main/source/internal/api/commands.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

RedWing-Panel-main/source/internal/api/commands.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

RedWing-Panel-main/source/internal/api/device.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

RedWing-Panel-main/source/internal/api/device.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

RedWing-Panel-main/source/internal/api/devicedata.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Report Analysis Logs

General

Target
RedWing-Panel-main/source/decom/dropper_smali/lib/armeabi-v7a/libxoafgxkgj.so
Size 16KB
Sample260821-dg65da1gla
SHA256 d988b0ccaae03ef57e5dd9ca3da74afbe7aee6bc6581f09ebcf69d64700572c2
MD5 dcd04405a17b000909f9764ab67d2a46
SHA1 5ea2f7d19cc7d9c1aea0741f455d18c5cf531cda
SHA512 7480ebd1aeb7dbd409fa7f45467e877f4a9c47bdeeed2d241b4491f4e74a300031f87a25a29a891a4d81b1c34cce025d058d70535b29ebc8f3d6de4580178936
SSDEEP 192:Gk2NgESn2nr4ljItOnbgoJsjBlYF04REwJil5ZdzBnsAb6mjvwqvP:zES2nMl8gn8oJsjBlYF0iqjdzBnbb/n
TLSH
T107722BC79221C807C1FB827B74174AE65F3D8142B0AEB77BA7902E753A1A15C9F85F20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

/tmp/RedWing-Panel-main/source/decom/dropper_smali/lib/armeabi-v7a/libxoafgxkgj.so
/tmp/RedWing-Panel-main/source/decom/dropper_smali/lib/armeabi-v7a/libxoafgxkgj.so
1⤵
PID:801

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads