General
- Target RecoilStandalone.exe
- Size 93.0MB
- Sample261022-yfec7axt8k
- SHA256 291bba2ffc2c7466ca09cc9ecc3fe7747d27f744843e4532df2360a3abf561f5
- MD5 f3b32a025be8ce3929ce0e0c54f56ea9
- SHA1 148061d3aad3dd327048435f41aaed0b0b8891b6
- SHA512 38302a8b2164276f4e271963c7f63763f3c6125a72c45af2eef4c5da9460410fb4b76f965a76d553e5e99558117ce25c54b09852884d0aac73ebc7d1ec6e4591
- SSDEEP 1572864:QpJidEjhnUgahphZdvOGjQpU9Mbt7n2TC4n9dM9HM8nzw/8YsnML5BRu7cyYU0:Q6CjlUgahphZd6Z2T2xzw/8/MyhYU
- TLSH T1FF283368C4E5CC2BEC393E3668352991023A5AC6F762C60D6B9F0F36571CBD5C06A63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RecoilStandalone.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
RecoilStandalone.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target RecoilStandalone.exe
- Size 93.0MB
- SHA256 291bba2ffc2c7466ca09cc9ecc3fe7747d27f744843e4532df2360a3abf561f5
- MD5 f3b32a025be8ce3929ce0e0c54f56ea9
- SHA1 148061d3aad3dd327048435f41aaed0b0b8891b6
- SHA512 38302a8b2164276f4e271963c7f63763f3c6125a72c45af2eef4c5da9460410fb4b76f965a76d553e5e99558117ce25c54b09852884d0aac73ebc7d1ec6e4591
- SSDEEP 1572864:QpJidEjhnUgahphZdvOGjQpU9Mbt7n2TC4n9dM9HM8nzw/8YsnML5BRu7cyYU0:Q6CjlUgahphZd6Z2T2xzw/8/MyhYU
- TLSH T1FF283368C4E5CC2BEC393E3668352991023A5AC6F762C60D6B9F0F36571CBD5C06A63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.