Overview

overview

7

Static

static

3

Rec Room Tools!.exe

windows10-2004-x64

7

Rec Room Tools!.exe

windows11-ltsc_2024-x64

7

gh.pyc

windows10-2004-x64

3

gh.pyc

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Rec Room Tools!.exe
  • Size 32.3MB
  • Sample260821-p6wwgseq2x
  • SHA256 9532fb7df31ecb3038d426aa9610fda64cc259048fe4991824473b1f2519eca9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
executionpyinstaller

Malware Config

Targets

    • Target
      Rec Room Tools!.exe
    • Size 32.3MB
    • SHA256 9532fb7df31ecb3038d426aa9610fda64cc259048fe4991824473b1f2519eca9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1behavioral2
    • Target
      gh.pyc
    • Size 10KB
    • SHA256 2303f332a12f81838cbac7e786c8bfd26b2fe2d24176cae35ec536ab56664972
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks