Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23-02-2024 20:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
oxygen_u/OxygenU.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
oxygen_u/OxygenU.exe
Resource
win10v2004-20240221-en
windows10-2004-x64
9 signatures
150 seconds
General
-
Target
oxygen_u/OxygenU.exe
-
Size
2.5MB
-
MD5
2f2fc53950b5074a9a2856dbb0cad192
-
SHA1
e6fddad494269767b2f3136b1c5c5793c8d5c627
-
SHA256
4635c9af7921ff99b0941d3d62574d39c4fc15f4897471c68734427d6cb8c49e
-
SHA512
1561c200e2f0126e3b9d6a8e2e4658f428c3eed8eef4fbbad3c5edeec9c04b4331ccfd27985ee763630ccbd3185e3beec550dc7a3aad7d6a2b36cbed8761fb85
-
SSDEEP
49152:F26vCbY8rkxYOPo4gtUUxJerbY8zBkqXfd+/9ADqanUWjuh:1CbY8rLOAmUxJerbY8zBkqXf0FhWK
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2952 OxygenU.exe