General
- Target oxui.dll
- Size 4.2MB
- Sample260619-tby5kshv2j
- SHA256 d79906f599271d6dbd47d4362d03c55bcb9044a82a02752d139fcbad68102327
- MD5 d53139d4371b5759fa1be4bcc106dda5
- SHA1 1dc686b4b522410a29debcd322fb3896120785f0
- SHA512 b8e13388b1aecaba6f72e1251f0c991de661efc6d8aec5786b99e6d622cc0529921d9e596b914cc009a18407c2870ea2800885324452589b567f15522d597818
- SSDEEP 49152:M95oH/4xr4z9cxB3BlQQIVvcTn/PIJ5MpXecESyjYsj1mbSx7EshdLxi0lIAeB9:MwHQJ4pcRlRAvSn/PsMpemSxDnX+d
- TLSH T1E926F181B3528229EF663073D1AC77A7093F7C8817BA81CB77C808B4AA155F165FCB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
oxui.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
oxui.dll
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target oxui.dll
- Size 4.2MB
- SHA256 d79906f599271d6dbd47d4362d03c55bcb9044a82a02752d139fcbad68102327
- MD5 d53139d4371b5759fa1be4bcc106dda5
- SHA1 1dc686b4b522410a29debcd322fb3896120785f0
- SHA512 b8e13388b1aecaba6f72e1251f0c991de661efc6d8aec5786b99e6d622cc0529921d9e596b914cc009a18407c2870ea2800885324452589b567f15522d597818
- SSDEEP 49152:M95oH/4xr4z9cxB3BlQQIVvcTn/PIJ5MpXecESyjYsj1mbSx7EshdLxi0lIAeB9:MwHQJ4pcRlRAvSn/PsMpemSxDnX+d
- TLSH T1E926F181B3528229EF663073D1AC77A7093F7C8817BA81CB77C808B4AA155F165FCB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.