Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/09/2026, 22:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
recoil_cal (1).exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
recoil_cal (1).exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
General
- Target recoil_cal (1).exe
- Size 33KB
- Sample260909-2htgnstvdw
- SHA256 9ecb2d68b6718be398fcd750b19f60ebd9da65d1068575720f3477a825d85955
- MD5 936f364da20d66379bc96aa052b9cd22
- SHA1 fac2360cebc6b5bad620def10c61d5ad28ca2d73
- SHA512 0ceab4e200a83a1f5c714e08f845763a0c9853d2dd0115e7d09ca52545346318f585ce24a6c0cb2e070cdad20ce1f16f8e3f8d1b37cd4574b487ee2119bbb147
- SSDEEP 384:FYG+x1xDptAxm6hOsJe7PPC9VZjI4vFvOEpqWLCRdkb3/oNo/2STvvNODpKdf2Gy:FeFFkmYoYtVOEpqWLo+AgKpQpaHfgUt
- TLSH T172F23B0973FC8A53E7FD47B8A4B2210403FAA4A76522C74D4DC970EF1A67B906941BD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 4552 recoil_cal (1).exe 4552 recoil_cal (1).exe