26448205659a864abbfa61f5d2291aeef5ce36c34453b8163dea380f29139ed7 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

D3DCompile...r3.dll

windows10-2004-x64

3

PenImc_cor3.dll

windows10-2004-x64

3

PenImc_cor3.dll

windows11-ltsc_2024-x64

3

Presentati...r3.dll

windows10-2004-x64

3

Presentati...r3.dll

windows11-ltsc_2024-x64

3

Recoil.exe

windows10-2004-x64

3

Recoil.exe

windows11-ltsc_2024-x64

3

vcruntime140_cor3.dll

windows10-2004-x64

3

vcruntime140_cor3.dll

windows11-ltsc_2024-x64

3

wpfgfx_cor3.dll

windows10-2004-x64

3

wpfgfx_cor3.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
recoil.zip
Size 58.2MB
Sample260826-bht54a1dka
SHA256 26448205659a864abbfa61f5d2291aeef5ce36c34453b8163dea380f29139ed7
MD5 24bed9029c955b1e3729ec3934ed4e0a
SHA1 b4190508436e6f33ac446e076ccbc2d695ef5700
SHA512 2d3434caa832c085b961fa10542845be201e57cc1a815ad9c125944a156e75d011fcb5692340ea40961316e1366443c4f3dd5b890cd89f065c2bb9b7e822f13d
SSDEEP 1572864:mqQjtMWwb8bQUHDxrTILC2K5mQoUONdG9688gjIjKqy:mr23b8bnHDxrTE5umLX3Kx8gcby
TLSH
T154D733CDE70CDBCF7431507C8F601A8252B696D708DBC5769AB4E8A9C4D6DE932C40AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

D3DCompiler_47_cor3.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

PenImc_cor3.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

PenImc_cor3.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

PresentationNative_cor3.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

PresentationNative_cor3.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Recoil.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Recoil.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

vcruntime140_cor3.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

vcruntime140_cor3.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

wpfgfx_cor3.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

wpfgfx_cor3.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  D3DCompiler_47_cor3.dll
- Size 4.0MB
- SHA256 0b190451168eda2ff389317ce6e601fbf7646ea7c07ce298460b8111836f99af
- MD5 2cf68c3ec491a9e1a66348c17c63f588
- SHA1 9aa9c46a05d7e21d0de3ae8e092eba3cfccf9b69
- SHA512 bd588d1c4946f36774a97cd48f64cdf92422997a4b7dc54140631bcbe9a1c7e7de98c3e479b2995b057630d39a8c1878df3cf32d1fdb89a1d8d09bf29d0110aa
- SSDEEP 49152:OXlJZpAeB6roiiqkhNA0UNoChHZYe/ik/N2q0H01PdrHhu4UxwtYeQ2jSTSdrYW6:OXTZX1GiEimBhuoYkWSdrYWpNFen0O
- TLSH
  T196169E21F6428072C8CA15F076EE776A947C9B301B3444C752D0ADA9ED711D3AF3AB9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  PenImc_cor3.dll
- Size 138KB
- SHA256 0a8977b05b6921e5b51741fc834b1b103f1cdd13fe667f5b410fdacca035ac86
- MD5 8ae62e4ec9a139fb8653e387e6f7ee58
- SHA1 68fed5c24c1a92251e20f7c571a9e5f890b9916e
- SHA512 feaf86b3c15fb4726db928fd28d20ca23fda496730ec7ecec97b45f5118d2b76918f3b8f1992f817b03d3cff6a9c1acd7da3fef4f8753a3079e9c6c70bc34d02
- SSDEEP 3072:8xQuwKYbrhI8sEpuR+5k4p7H6CMLY4bg9ez:iQ+PEk+6BTq96
- TLSH
  T12CD33A207659C0A1C5AE407C9D79E75AB33BAB21CF6109D373A8AB4F2DB41C25F3161B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2 behavioral3
- Target
  PresentationNative_cor3.dll
- Size 921KB
- SHA256 443c129d52728f0968442851a324fc4b14f5c5b6d60362377862fb7578525322
- MD5 e7b10b7a14c836f3315e011948ce018f
- SHA1 f16bbb5be33e56a20e109833f781fdaab47b9278
- SHA512 c461536afdaa470249b38417bfb996639ccdc91d81595a2d9394a78e92b3e8bcd0ffb4a861e485d88fb0453320cd62a580d415f9ae6056606b4bb50098e3334c
- SSDEEP 24576:g+f3m/TJ1oVWvnIJyCdCzVKKBLVeQzqhbAVaNNht9l1Erc8iHaMefkgycA:Rvm/TJ1oVWcyCMzVrzxjVaPVvErc8iHz
- TLSH
  T1BD156C60F6C342B6DC8200F18AED3799A65CE729072C18DB93948DC95A7CAC37B39757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4 behavioral5
- Target
  Recoil.exe
- Size 137.4MB
- SHA256 70f1351ad51851d1e2db802b123e990d9e32a23e4c3f61cde17241acf784bc34
- MD5 a4b14ace22f005767c90262fd63f0e6b
- SHA1 4f4369948fbf977d0f49690e46a898da9334bf12
- SHA512 ee53d3c2cbd2b2e5f8c639b77def3cda639b2bd52b33a8bd50eb64d2e4683e3617075a989e155a8ea118e1f0ebbe6961e483377f383b09744f0e524cd4aa779d
- SSDEEP 1572864:ZNObsp9BF2fFcsK1xB7LwSsz2piGg8KP01aZvoX:ZsbsL3/jwS1oNPvha
- TLSH
  T12F688D1273E8AE25F5BA0671A7B6EAA0C77DBD151324D6CF0184F94D28723D1AD313A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6 behavioral7
- Target
  vcruntime140_cor3.dll
- Size 89KB
- SHA256 a9d7732a3c3de09f0601a7fa2555093dcb49f08e2fc62a86091461f0f38393ed
- MD5 4bea1ba68690620b78c7502ac968f0ba
- SHA1 acdc523fa28632fcecede3eeaf62c6bce26527b4
- SHA512 d451625494b54b96a481d34f5b42b9c631810558267e8b37b182fe09583422f1c1171a922c9abfe4227ee91f430f3579e8ab8173234264a435fdcfa6a16ce57e
- SSDEEP 1536:WJJFW1PcUMCdLiNWNrjO+MT+S0OeneLDA50Xsd2zkkBGCGVbBBTkfeecb6RWSwgZ:I3W1P/MCdnQ+8EWXsd2ARNBPecb60Swo
- TLSH
  T10C937E9375F881B2D99E05B0D9BBFB161D3DE6410FF06BD71B949844DEA2BC09B3021A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8 behavioral9
- Target
  wpfgfx_cor3.dll
- Size 1.7MB
- SHA256 949022134996cfbfaf651f7f5e5ce7178cc9491d27e53977b04e180f8063083c
- MD5 75e7ec0291fd342d263fc374df34d73f
- SHA1 5bb485ac801f8025ffa740f5582a5de64c06c855
- SHA512 3054c01b913d269c0f5991195d9d6e87ea2596bdac7b885cb30ce28a32eb9630e4528558631b732bcc7110aeac35ad54df12d1b6d7ffe3dac224104d7d584298
- SSDEEP 24576:FD4JO5fwxj7z6q0R+4SEgoO5/GdiFEL7ZC8/0lSwO6NJi++f3Sq:FmOZwxj7z6sqU/3EJC8iSIJi++f3Sq
- TLSH
  T122855B203ED98636F95A02319C7D795FD11DD63007A844CB62ACEA1E68776C32B732E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral11

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

© 2018-2026

Terms | Privacy