Overview
overview
8Static
static
3Oxymorphaz...4).exe
windows10-2004-x64
1Oxymorphaz...6).exe
windows10-2004-x64
Oxymorphaz...4).exe
windows10-2004-x64
1Oxymorphaz...6).exe
windows10-2004-x64
3zararlı/h...86.exe
windows10-2004-x64
salinewin1...ty.exe
windows10-2004-x64
3salinewin1.5.exe
windows10-2004-x64
Analysis
- max time kernel
898s - max time network
425s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/10/2026, 14:17
Static task
static1
Behavioral task
behavioral1
Sample
Oxymorphazone (x64).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Oxymorphazone (x86).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral3
Sample
Oxymorphazone-safety (x64).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Oxymorphazone-safety (x86).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral5
Sample
zararlı/hydrogenx86.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
salinewin1.5-safety.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral7
Sample
salinewin1.5.exe
Resource
win10v2004-20260911-en
General
- Target salinewin1.5-safety.exe
- Size 245KB
- Sample261018-rlrgdabc89
- SHA256 bafd3d712a32b884001dccd7f6f77fd9aa515b254352310e20f67026364c7884
- MD5 e69d64dfc3d809dc8dbdda9c367b0afc
- SHA1 dc61951ccd463291bb2e2758fc8afebaa8ffadcc
- SHA512 d5e644ab734168d5f42028a6196aba091a60b8536e0101e15254ecc154f564b495f4d66d948399cd4de42f19423cb500a8f8b90d59652fb31e68f1375e28def5
- SSDEEP 3072:3WiJUpGuEy1AXy4e5II5CoTbLYiBZP5pHQpYR95WPNp/H:GBpduiPRZPPHQpY35WPNpf
- TLSH T127347D21B5C1C4F1F97945356836C9910E6AFC36AF501EAF3298332F0E751E2453AEAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language salinewin1.5-safety.exe