13ee1c9263f2a3637bbc16d38dc704a873b432f9b4cdf4414c45f322d4febb98 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

recycle-la...up.exe

windows10-ltsc_2021-x64

7

recycle-la...up.exe

windows11-ltsc_2024-x64

7

DepotDownloader.exe

windows10-ltsc_2021-x64

1

DepotDownloader.exe

windows11-ltsc_2024-x64

1

ReCyclePatcher.exe

windows10-ltsc_2021-x64

1

ReCyclePatcher.exe

windows11-ltsc_2024-x64

1

recycle-launcher.exe

windows10-ltsc_2021-x64

6

recycle-launcher.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
recycle-launcher_0.6.69_x64-setup.exe
Size 66.5MB
Sample261014-espvxayshy
SHA256 13ee1c9263f2a3637bbc16d38dc704a873b432f9b4cdf4414c45f322d4febb98
MD5 154ad720e505f204c1619d67d550ec94
SHA1 8035e02f5489a8e4955eaf6e629742d86b39c5d9
SHA512 1ac95a395d711b3a2fc9b0e90f047e08c006683bacb9ced946eaf7c945d6dc499edbf0c2da44b15e22a81b63fb625b2ad971e86295c3168f699fee04d76783d6
SSDEEP 1572864:tPcuFlKeOX9gqRR6zlJhYmGW7ZS2fadRHbQL7fLeYnv+UlBLc+Ol7RZV31o1:tEMONZRR6BJGjW7A2faPcL7qKDLcXtlA
TLSH
T1E8E73389AFE45563DA76C7BDC88EB9BDC77AD2C226784B71D432C780AAC801D0F5D442
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

recycle-launcher_0.6.69_x64-setup.exe

Resource

win10ltsc2021-20260911-en

windows10-ltsc_2021-x64

6 signatures

300 seconds

Behavioral task

behavioral2

Sample

recycle-launcher_0.6.69_x64-setup.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

300 seconds

Behavioral task

behavioral3

Sample

DepotDownloader.exe

Resource

win10ltsc2021-20260911-en

windows10-ltsc_2021-x64

0 signatures

300 seconds

Behavioral task

behavioral4

Sample

DepotDownloader.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

ReCyclePatcher.exe

Resource

win10ltsc2021-20260911-en

windows10-ltsc_2021-x64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

ReCyclePatcher.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

recycle-launcher.exe

Resource

win10ltsc2021-20260911-en

windows10-ltsc_2021-x64

11 signatures

300 seconds

defense_evasion discovery trojan

Behavioral task

behavioral8

Sample

recycle-launcher.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

11 signatures

300 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  recycle-launcher_0.6.69_x64-setup.exe
- Size 66.5MB
- SHA256 13ee1c9263f2a3637bbc16d38dc704a873b432f9b4cdf4414c45f322d4febb98
- MD5 154ad720e505f204c1619d67d550ec94
- SHA1 8035e02f5489a8e4955eaf6e629742d86b39c5d9
- SHA512 1ac95a395d711b3a2fc9b0e90f047e08c006683bacb9ced946eaf7c945d6dc499edbf0c2da44b15e22a81b63fb625b2ad971e86295c3168f699fee04d76783d6
- SSDEEP 1572864:tPcuFlKeOX9gqRR6zlJhYmGW7ZS2fadRHbQL7fLeYnv+UlBLc+Ol7RZV31o1:tEMONZRR6BJGjW7A2faPcL7qKDLcXtlA
- TLSH
  T1E8E73389AFE45563DA76C7BDC88EB9BDC77AD2C226784B71D432C780AAC801D0F5D442
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  DepotDownloader.exe
- Size 74.8MB
- SHA256 dd482f4b01a3820b2636b4917b2fcd3584e2521f21551ab7596557a18858d7d0
- MD5 069df035f3e0cbb1892dbddbb38cafea
- SHA1 a4507fff957fc3a226a5444972932a20c53ca914
- SHA512 37c5285408e5f9d6679a9436604910f2d25d17f2ccc481fd050a17048e973a67d9b5478b48a5df5e960a8e0a1b32f8359b084b22fa4b3432cdc3573970abb442
- SSDEEP 786432:/KYzFggoyAqdK6h/IEEpr4lQ7R13kUqA8Q8QYo:iY6go0t/0PbD
- TLSH
  T16708B015E3D84B1AD66FC27CC2738112E6B1F4422361C6CF1554EA992FA3BC1AB77362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ReCyclePatcher.exe
- Size 54KB
- SHA256 15bfb2818f65004b43989e5308ab6d1f56ff2d2895d96e481c6e3ded2a99641f
- MD5 0c7a2c5e85d1d313b0867d8059da5f16
- SHA1 9875ad525b00982f590b7b1594637dedbf314137
- SHA512 14f8eb7088fea9371f21003c94809fdaba3758432fe2c8c05499a9732dd75dacceef80e30f3916427d4ca717c913cba193c110d369e492d47766ad5cf1ab116b
- SSDEEP 768:KzmfJO+GsGDzNsjKXTa53VE+LhwoQiB7KdgFayX9KYvo:JfJO+MNGvZi6a8Ed
- TLSH
  T193430826CB27407FE2A9D938C5434941DE72BC864B91B6CF67815CD60E66AD4EF3E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  recycle-launcher.exe
- Size 6.8MB
- SHA256 a87cedb6644556cbec3c5ba8ec0385b0936357742396d202c094328c286652c6
- MD5 4c720b45728678dc3126cbd377567391
- SHA1 0920f3bb87091438fe72e6768a3f5a5ac06a04ea
- SHA512 a70b2ae04912dd1b730f04a49fbb5e4cb1db49c17b0431df2a31b036328d4aaec6c9e5082f40f8c336648887d2a6de0ffce46420c9c15d633bcdb87eb1f6b3ef
- SSDEEP 98304:tAb43rbxGL30HzwRfbzbVCY9cJgwf7Vx+Yh0WtIYwn+:D3r3HzcNWgo7VZh0rZ
- TLSH
  T151668E43F2A181E9C05EC178935AA233F732B8890A34B2FB5BD45B212F66F506F1D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

defense_evasiondiscoverytrojan

behavioral8

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy