General
- Target OxyMapper.exe
- Size 251KB
- Sample261017-e7fksahz2v
- SHA256 377784db55a00afd93b50cb0fedd0b415b4dcbb2862991fd94276e68153712e9
- MD5 c29ed4df6cded674859ee60b4a830906
- SHA1 3cbbd06024346e3dcdac95cf8603ea799e7843d2
- SHA512 282167e2f69b06df48f366d544e5089e83425fe0130342ef4cdbb205d5db8f48ed0186cb35f2c2e25b6b9b3b45970fd76cd47838d47fc4e1285d46b247bdfcd5
- SSDEEP 6144:oki+Dov13oZ4GolOEhyFU9b1gE4bQ5OlWl1t5PKH:MVVGghxBzz
- TLSH T1AE443A1CA5A72CADCEE3E5F8853A5142F222B48E17B2C5D763E005F51E67ADC6739C02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OxyMapper.exe
Resource
win10ltsc2021-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target OxyMapper.exe
- Size 251KB
- SHA256 377784db55a00afd93b50cb0fedd0b415b4dcbb2862991fd94276e68153712e9
- MD5 c29ed4df6cded674859ee60b4a830906
- SHA1 3cbbd06024346e3dcdac95cf8603ea799e7843d2
- SHA512 282167e2f69b06df48f366d544e5089e83425fe0130342ef4cdbb205d5db8f48ed0186cb35f2c2e25b6b9b3b45970fd76cd47838d47fc4e1285d46b247bdfcd5
- SSDEEP 6144:oki+Dov13oZ4GolOEhyFU9b1gE4bQ5OlWl1t5PKH:MVVGghxBzz
- TLSH T1AE443A1CA5A72CADCEE3E5F8853A5142F222B48E17B2C5D763E005F51E67ADC6739C02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1