d5bc5df3600998e0f3440ef073cd6b613951bb0f87df83226783443eced68a37

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 15:12

Target
OxalicLoader (1).exe
Size 290KB
Sample261014-slecgswzhy
SHA256 d5bc5df3600998e0f3440ef073cd6b613951bb0f87df83226783443eced68a37
MD5 95d5557b51c6f1dc6a930e662f008809
SHA1 f07c18f70c1369bd5c57e9ef7f3d392688fec878
SHA512 c8d1231184ac124899eb2da05b2f8bc738232fd9f034fd23658d9b9a28d48f08fa9b4893bc0e50b3543e543e3cadeb276323dac2c4851a5447258e50c5c2f17d
SSDEEP 6144:L/kSbjsqhbpFtlmPAJUEkCC16QbcivIJrN0DYau6WQgwoN:LPbPhbH4Emlw
TLSH
T14A544B1667540EBCD1ABE179566B6802F679785D03AB8EEF03E080763E472C09F3EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2928	OxalicLoader (1).exe
2928	OxalicLoader (1).exe

C:\Users\Admin\AppData\Local\Temp\OxalicLoader (1).exe
"C:\Users\Admin\AppData\Local\Temp\OxalicLoader (1).exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2928