3ef7eb0816dc3e90bd47be2620b53d57628d3d5fb79cfaef2166ee101504ce40 | Triage

Submit
Reports

Overview

overview

Static

static

Oxegen Exe...ox.dll

windows7-x64

1

Oxegen Exe...ox.dll

windows10-2004-x64

1

Oxegen Exe...min.js

windows7-x64

3

Oxegen Exe...min.js

windows10-2004-x64

3

Oxegen Exe...nds.js

windows7-x64

3

Oxegen Exe...nds.js

windows10-2004-x64

3

Oxegen Exe...min.js

windows7-x64

3

Oxegen Exe...min.js

windows10-2004-x64

3

Oxegen Exe...en.dll

windows7-x64

1

Oxegen Exe...en.dll

windows10-2004-x64

1

Oxegen Exe...en.exe

windows7-x64

1

Oxegen Exe...en.exe

windows10-2004-x64

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
09-07-2024 21:57

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Oxegen Exec/FastColoredTextBox.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Oxegen Exec/FastColoredTextBox.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Oxegen Exec/Scripts/Elysian admin.js

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Oxegen Exec/Scripts/Elysian admin.js

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Oxegen Exec/Scripts/Quick kick and other commands.js

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Oxegen Exec/Scripts/Quick kick and other commands.js

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Oxegen Exec/Scripts/fedora admin.js

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Oxegen Exec/Scripts/fedora admin.js

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Oxegen Exec/oxegen.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Oxegen Exec/oxegen.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Oxegen Exec/oxegen.exe

Resource

win7-20240708-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Oxegen Exec/oxegen.exe

Resource

win10v2004-20240709-en

discordrat persistence rat rootkit stealer

windows10-2004-x64

6 signatures

150 seconds

Report Analysis Logs

General

Target

Oxegen Exec/FastColoredTextBox.dll
Size

323KB
MD5

71963eb6707ef2de595d336d5810082b
SHA1

aefa3ec8411e2ad2a7f0a496be0c7f52cb908bd5
SHA256

f67f8caf9216123c0f669ae7a0e9a086a28ad9fee7e4756c224a7706ceaab1cd
SHA512

a2410423d7d9c730e3d7d48a03a01342149778539bc2bb32fa404d1722296eb1f0ebfc2f8224665b6e84b6e17a16cc3392334ad7958662fe9d65c6bada6a471b
SSDEEP

6144:JR0J4lxA/7BA4xvNIwcKAZ+IBJhaeFMdFDCBdxBsqmLDi5eN5DDl1SqPF:JR0J4ElAovNIwxAZdBOeFMuzheN5

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Oxegen Exec\FastColoredTextBox.dll",#1
1⤵
PID:1952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy