Overview
overview
6Static
static
3DenuvOwO/r...vm.sys
windows10-2004-x64
3DenuvOwO/r...de.dll
windows10-2004-x64
1DenuvOwO/r...hv.dll
windows10-2004-x64
1DenuvOwO/r...kd.sys
windows10-2004-x64
3DenuvOwO/r...og.dll
windows10-2004-x64
1DenuvOwO/r...al.dll
windows10-2004-x64
1DenuvOwO/r...er.exe
windows10-2004-x64
1DenuvOwO/r...er.exe
windows11-ltsc_2024-x64
1DenuvOwO/r...ex.dll
windows10-2004-x64
1DenuvOwO/r...ex.dll
windows11-ltsc_2024-x64
1DenuvOwO/r...64.dll
windows10-2004-x64
1DenuvOwO/r...64.dll
windows11-ltsc_2024-x64
1DenuvOwO/r...64.dll
windows10-2004-x64
1DenuvOwO/r...64.dll
windows11-ltsc_2024-x64
1VBS.cmd
windows10-2004-x64
6VBS.cmd
windows11-ltsc_2024-x64
6Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/10/2026, 19:41
Static task
static1
Behavioral task
behavioral1
Sample
DenuvOwO/runtime/media/driver_amd/SimpleSvm.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
DenuvOwO/runtime/media/driver_intel/hyperevade.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral3
Sample
DenuvOwO/runtime/media/driver_intel/hyperhv.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
DenuvOwO/runtime/media/driver_intel/hyperkd.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral5
Sample
DenuvOwO/runtime/media/driver_intel/hyperlog.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
DenuvOwO/runtime/media/driver_intel/kdserial.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral7
Sample
DenuvOwO/runtime/media/hypervisor-launcher.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
DenuvOwO/runtime/media/hypervisor-launcher.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
DenuvOwO/runtime/media/reflex.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
DenuvOwO/runtime/media/reflex.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
DenuvOwO/runtime/media/steam_api64.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
DenuvOwO/runtime/media/steam_api64.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
DenuvOwO/runtime/media/steamclient64.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
DenuvOwO/runtime/media/steamclient64.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
VBS.cmd
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
VBS.cmd
Resource
win11ltsc2024-20260911-en
General
- Target DenuvOwO/runtime/media/driver_intel/hyperkd.sys
- Size 11KB
- Sample261002-yejaragf72
- SHA256 2adc6549d3a3274545f556f747f4f83f54bc5f3896d3899a2705327770dd3b48
- MD5 15fe0211002ad85ef7146bbb91f48be9
- SHA1 8ba37a7db0adc68f62884c1a16333c520bbc8be6
- SHA512 f0cb6ff4074cc5854aa1d1f08cabfbf16a20c3c2f6829c953443664ecc5fbbffafed9926eec7f6a9ad65d3727d2b94a5f741fd5de77ab95ee63072c8aa493e5a
- SSDEEP 192:V+Sq4qGmnydcI9U6mycymyJyJyC6AVJ+s6mwWAbgL47PKRL:Vzf7cI9U6mhnoQD6AVJlYBq47Kd
- TLSH T12742F951A39BECD1C91A827C81960C3E40A9E101D72707C79FA9D4B5CE8D7E16E3FA53
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 636 cmd.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\DenuvOwO\runtime\media\driver_intel\hyperkd.sys1⤵
- Executes a command shell one-liner
PID:636 -
C:\Users\Admin\AppData\Local\Temp\DenuvOwO\runtime\media\driver_intel\hyperkd.sysC:\Users\Admin\AppData\Local\Temp\DenuvOwO\runtime\media\driver_intel\hyperkd.sys2⤵PID:1928
-