089d6586585521b5bb902b0bd828685e1ae9d16a7eb587b35536fb60be9f7015

Login
Reports

Overview

overview

Static

static

RedWing-Pa...server

ubuntu-18.04-amd64

RedWing-Pa...er.exe

windows10-2004-x64

RedWing-Pa...er.exe

windows11-ltsc_2024-x64

RedWing-Pa...nux.sh

ubuntu-18.04-amd64

RedWing-Pa...nux.sh

debian-9-armhf

RedWing-Pa...nux.sh

debian-9-mips

RedWing-Pa...nux.sh

debian-9-mipsel

RedWing-Pa...ws.bat

windows10-2004-x64

RedWing-Pa...ws.bat

windows11-ltsc_2024-x64

RedWing-Pa...une.so

ubuntu-18.04-amd64

RedWing-Pa...une.so

debian-9-armhf

RedWing-Pa...une.so

debian-9-mips

RedWing-Pa...une.so

debian-9-mipsel

RedWing-Pa...une.so

debian-12-armhf

RedWing-Pa...kgj.so

ubuntu-18.04-amd64

RedWing-Pa...kgj.so

debian-9-armhf

RedWing-Pa...kgj.so

debian-9-mips

RedWing-Pa...kgj.so

debian-9-mipsel

RedWing-Pa...kgj.so

debian-12-armhf

RedWing-Pa...mod.so

ubuntu-18.04-amd64

RedWing-Pa...mod.so

debian-9-armhf

RedWing-Pa...mod.so

debian-9-mips

RedWing-Pa...mod.so

debian-9-mipsel

RedWing-Pa...kha.js

windows10-2004-x64

RedWing-Pa...kha.js

windows11-ltsc_2024-x64

RedWing-Pa...ast.js

windows10-2004-x64

RedWing-Pa...ast.js

windows11-ltsc_2024-x64

RedWing-Pa...nds.js

windows10-2004-x64

RedWing-Pa...nds.js

windows11-ltsc_2024-x64

RedWing-Pa...ice.js

windows10-2004-x64

RedWing-Pa...ice.js

windows11-ltsc_2024-x64

RedWing-Pa...ata.js

windows10-2004-x64

Analysis

max time kernel
1s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
21/08/2026, 02:59

Sharing

Copy URL Twitter E-mail

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

RedWing-Panel-main/bin/linux/server

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery

Behavioral task

behavioral2

Sample

RedWing-Panel-main/bin/windows/server.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

RedWing-Panel-main/bin/windows/server.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

RedWing-Panel-main/install-linux.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

19 signatures

150 seconds

antivm credential_access defense_evasion discovery execution persistence privilege_escalation

Behavioral task

behavioral5

Sample

RedWing-Panel-main/install-linux.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral6

Sample

RedWing-Panel-main/install-linux.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral7

Sample

RedWing-Panel-main/install-linux.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral8

Sample

RedWing-Panel-main/install-windows.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

RedWing-Panel-main/install-windows.bat

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

RedWing-Panel-main/source/decom/apk_smali/lib/arm64-v8a/libcputune.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

RedWing-Panel-main/source/decom/apk_smali/lib/arm64-v8a/libcputune.so

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

RedWing-Panel-main/source/decom/apk_smali/lib/arm64-v8a/libcputune.so

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

RedWing-Panel-main/source/decom/apk_smali/lib/arm64-v8a/libcputune.so

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

RedWing-Panel-main/source/decom/apk_smali/lib/armeabi-v7a/libcputune.so

Resource

debian12-armhf-20260513-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

RedWing-Panel-main/source/decom/dropper_smali/lib/arm64-v8a/libxoafgxkgj.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

RedWing-Panel-main/source/decom/dropper_smali/lib/arm64-v8a/libxoafgxkgj.so

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

RedWing-Panel-main/source/decom/dropper_smali/lib/arm64-v8a/libxoafgxkgj.so

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

RedWing-Panel-main/source/decom/dropper_smali/lib/arm64-v8a/libxoafgxkgj.so

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

RedWing-Panel-main/source/decom/dropper_smali/lib/armeabi-v7a/libxoafgxkgj.so

Resource

debian12-armhf-20260127-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

RedWing-Panel-main/source/internal/api/antichernukha.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

RedWing-Panel-main/source/internal/api/antichernukha.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

RedWing-Panel-main/source/internal/api/blast.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

RedWing-Panel-main/source/internal/api/blast.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

RedWing-Panel-main/source/internal/api/commands.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

RedWing-Panel-main/source/internal/api/commands.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

RedWing-Panel-main/source/internal/api/device.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

RedWing-Panel-main/source/internal/api/device.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

RedWing-Panel-main/source/internal/api/devicedata.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Report Analysis Logs

Errors

Reason

Payload did not run: Failed to set timezone: Failed to set time zone: Connection timed out payload error: fork/exec /tmp/RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so: exec format error

General

Target
RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so
Size 98KB
Sample260821-dg65da1gla
SHA256 089d6586585521b5bb902b0bd828685e1ae9d16a7eb587b35536fb60be9f7015
MD5 91b47e379f760a8a88c1945b7424cf75
SHA1 6744dbcdd18988662fbe4e0892be8603fc783ce1
SHA512 6bd04fc66f8ff94b7e238a2b1e27875fca556a7f7bab21a00f8349b3fd69fccf86b58487a1e16d45a7b5dfa627ae9d7b6952aeb5de5eab3ece706af41bc93efd
SSDEEP 1536:uVm2Th1Vv0u5Y5Bs74EEVIDYTVkfjvM7QouamgV/0v5RdohF0PSSoeWOiKl4UwH:l2N1VvMwMu9gV/0v5RKhF0PME
TLSH
T194A3FB0A921C5433F2EAB2FC2C194562FC3334929667EE5277F2510EED6B1D2CE26635
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

/tmp/RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so
/tmp/RedWing-Panel-main/source/decom/stealer_smali/lib/arm64-v8a/libcoremod.so
1⤵
PID:744

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads