oski | 0ed728f2e4b3c4268647359edb8043e5[.]exe

General

Target
0ed728f2e4b3c4268647359edb8043e5.exe
Size 212KB
Sample220517-2r8mysacf8
SHA256 fca48ccbf3db60291b49f2290317b4919007dcc4fb943c1136eb70cf998260a5
MD5 0ed728f2e4b3c4268647359edb8043e5
SHA1 e423b363c87505fafebc5694e73bc6a807e02e64
SHA512 14a4a5669088431271e91e71d229b261a632b850f62e7a090352a1a55f0c33b0df13d873528c813fabad3a88f2e32dd9c54215065a834514b73589170059b9a0
SSDEEP 3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIH1Xi6FLPo3clJ2v:WfUauY68uSWCx+XA7mg2pNS1Ljo3cf2
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

oski

Malware Config

Extracted

Family

oski

C2

himarkh.xyz

Signatures

Oski family
oski

File Explorer

0ed728f2e4b3c4268647359edb8043e5.exe

.exe 212KB

0ed728f2e4b3c4268647359edb8043e5.exe

IMPHASH 7bb9d345a5fec4fbbf5100d6a3ffbb8c
SHA256 fca48ccbf3db60291b49f2290317b4919007dcc4fb943c1136eb70cf998260a5
MD5 0ed728f2e4b3c4268647359edb8043e5
SHA1 e423b363c87505fafebc5694e73bc6a807e02e64
SHA512 14a4a5669088431271e91e71d229b261a632b850f62e7a090352a1a55f0c33b0df13d873528c813fabad3a88f2e32dd9c54215065a834514b73589170059b9a0
SSDEEP 3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIH1Xi6FLPo3clJ2v:WfUauY68uSWCx+XA7mg2pNS1Ljo3cf2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29051

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapAlloc GetProcessHeap CreateFileA GetFileSize WriteFile ReadFile MultiByteToWideChar CloseHandle GetFullPathNameW FindFirstFileExW FindClose FindNextFileW LocalAlloc GetVersionExA LocalFree Sleep GlobalMemoryStatus GetFileAttributesA SetFilePointer MapViewOfFile UnmapViewOfFile SystemTimeToFileTime GetTickCount FileTimeToSystemTime GetLocalTime CreateFileMappingA GetFileInformationByHandle WriteConsoleW SetEndOfFile FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle FileTimeToLocalFileTime GetLastError FindFirstFileExA FindNextFileA EncodePointer DecodePointer HeapFree WideCharToMultiByte GetSystemTimeAsFileTime GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetCurrentThreadId GetProcAddress HeapSize ExitProcess HeapCreate GetStdHandle GetModuleFileNameW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount RtlUnwind SetHandleCount GetFileType DeleteCriticalSection SetEnvironmentVariableW SetEnvironmentVariableA GetTimeZoneInformation LCMapStringW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetStringTypeW HeapReAlloc LoadLibraryW CompareStringW CreateFileW

user32

GetDesktopWindow

netapi32

NetWkstaGetInfo NetApiBufferFree DsRoleGetPrimaryDomainInformation

Sharing