Overview
overview
8Static
static
3Oxymorphaz...4).exe
windows10-2004-x64
1Oxymorphaz...6).exe
windows10-2004-x64
Oxymorphaz...4).exe
windows10-2004-x64
1Oxymorphaz...6).exe
windows10-2004-x64
3zararlı/h...86.exe
windows10-2004-x64
salinewin1...ty.exe
windows10-2004-x64
3salinewin1.5.exe
windows10-2004-x64
Analysis
- max time kernel
898s - max time network
441s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/10/2026, 14:17
Static task
static1
Behavioral task
behavioral1
Sample
Oxymorphazone (x64).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Oxymorphazone (x86).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral3
Sample
Oxymorphazone-safety (x64).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Oxymorphazone-safety (x86).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral5
Sample
zararlı/hydrogenx86.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
salinewin1.5-safety.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral7
Sample
salinewin1.5.exe
Resource
win10v2004-20260911-en
General
- Target Oxymorphazone-safety (x64).exe
- Size 140KB
- Sample261018-rlrgdabc89
- SHA256 cbaefb8dbfc6523fbd4467ae9f8d64210d1691548f1d47582cfed64533d3fb96
- MD5 b18393d161f4ee018f9d636605da76a9
- SHA1 578d05c11ba5571f962b3cb05b671cef83880638
- SHA512 997e57c7219492a13ab4b10080f0ce75e111a26b1275a9e7befa3ef8cf2ba796cb48f6badd76402685c3e5135f84b6fb5f678b7a5c605bb07ce75b6f791f4e42
- SSDEEP 3072:TGSeUVytGMlZUh8oUy1QPKnvvimq77p+g:TLVMDU5Uy16R/p
- TLSH T121E35C07736231E5D57286748461EA66E7737C7107608FAF02E18A673F271D0BE6BB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2624 Oxymorphazone-safety (x64).exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2624 Oxymorphazone-safety (x64).exe 2624 Oxymorphazone-safety (x64).exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Oxymorphazone-safety (x64).exe"C:\Users\Admin\AppData\Local\Temp\Oxymorphazone-safety (x64).exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2624
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3e0 0x3dc1⤵PID:4724