General
- Target recoil.exe
- Size 11.1MB
- Sample260924-eleflade94
- SHA256 37acedebec46d9e5a7a2aedbb805a8cdd8b72556b0fe54cc7c89041b6b1b526a
- MD5 7dff5f2a20e4f35e742e39b1b5cc9457
- SHA1 3c4aa4b057db8f41df9cc21863d2c5e18cc97a9b
- SHA512 5b687d17fd9dc60ac0c0fcc094893597c00fdc15b57b22c3c89fd9ceca53b39292f2ab76bb78aa3339069f9f0f16d3414d6fd01583f2c7289c4cf94010b3eaf8
- SSDEEP 196608:NLcyhvkReuduBGvlmNZ9lb+K+vaqD26JXhnKMNLyuxHYD:NL3ueJQNmNZ9lb+5vaWL5hKoLyB
- TLSH T1F2C623059D98DD32FABB07755275CDACB36020B8017C9BD654E1E8E9B3CB3C7AA092C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
recoil.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
recoil.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target recoil.exe
- Size 11.1MB
- SHA256 37acedebec46d9e5a7a2aedbb805a8cdd8b72556b0fe54cc7c89041b6b1b526a
- MD5 7dff5f2a20e4f35e742e39b1b5cc9457
- SHA1 3c4aa4b057db8f41df9cc21863d2c5e18cc97a9b
- SHA512 5b687d17fd9dc60ac0c0fcc094893597c00fdc15b57b22c3c89fd9ceca53b39292f2ab76bb78aa3339069f9f0f16d3414d6fd01583f2c7289c4cf94010b3eaf8
- SSDEEP 196608:NLcyhvkReuduBGvlmNZ9lb+K+vaqD26JXhnKMNLyuxHYD:NL3ueJQNmNZ9lb+5vaWL5hKoLyB
- TLSH T1F2C623059D98DD32FABB07755275CDACB36020B8017C9BD654E1E8E9B3CB3C7AA092C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.