General
- Target oxygen_u.zip
- Size 1.9MB
- Sample260926-2phzhsshrb
- SHA256 2a572f51e2c64621f08d4a9253eb8d0efa2c44a3cc3d34254fed659c700a6606
- MD5 82879670dfe8994b54d76d499335a92e
- SHA1 b4713f9223044746be5ce13d3e020d24535998c4
- SHA512 8ae7cb4033a18bfbbafbc3b4a090d9e44092627187593ec3964480652206c9dd7806f579443c61385dd8c9c4fec22c7a59219f17c535eb3181ce78bcac2275fb
- SSDEEP 49152:i0QiVnTom/ugvnDPtJov6dMtB2qnFdA0zA/P7y:i0xMcusDPtJov6qB2qnFmA87y
- TLSH T14A9533D73F3009FBC40F0A2E1717076B5A9D73E162C37644B54603AE646E4A8A7BE35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
oxygen_u/OxygenU.exe
Resource
win10ltsc2021-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target oxygen_u/OxygenU.exe
- Size 2.5MB
- SHA256 4635c9af7921ff99b0941d3d62574d39c4fc15f4897471c68734427d6cb8c49e
- MD5 2f2fc53950b5074a9a2856dbb0cad192
- SHA1 e6fddad494269767b2f3136b1c5c5793c8d5c627
- SHA512 1561c200e2f0126e3b9d6a8e2e4658f428c3eed8eef4fbbad3c5edeec9c04b4331ccfd27985ee763630ccbd3185e3beec550dc7a3aad7d6a2b36cbed8761fb85
- SSDEEP 49152:F26vCbY8rkxYOPo4gtUUxJerbY8zBkqXfd+/9ADqanUWjuh:1CbY8rLOAmUxJerbY8zBkqXf0FhWK
- TLSH T1D2C50256F2FB8C9ADB6B16749E65672118DC783928FAC20E32873A47D8D3741CCD470A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.