General

  • Target

    30058aeb6aba06317df8884ff8d698dac3dcdf3a599a33a60a0550d124206be8

  • Size

    319KB

  • Sample

    220520-gl5znafhan

  • MD5

    c66d5474a48f7c0996c7f4262e14e6e8

  • SHA1

    13056b48413c40187c5a3accad97f7e7af8918ad

  • SHA256

    30058aeb6aba06317df8884ff8d698dac3dcdf3a599a33a60a0550d124206be8

  • SHA512

    96702e6327feb5ec4aaba30ec3cfc4fae7d31e193d4b1d76a4590c41de5a5657f08394fa59fb4df757ae59fb6063771f05e30d0828bc41755ad1d43b06bf9a29

Malware Config

Extracted

Family

oski

C2

thekurva.xyz

Targets

    • Target

      30058aeb6aba06317df8884ff8d698dac3dcdf3a599a33a60a0550d124206be8

    • Size

      319KB

    • MD5

      c66d5474a48f7c0996c7f4262e14e6e8

    • SHA1

      13056b48413c40187c5a3accad97f7e7af8918ad

    • SHA256

      30058aeb6aba06317df8884ff8d698dac3dcdf3a599a33a60a0550d124206be8

    • SHA512

      96702e6327feb5ec4aaba30ec3cfc4fae7d31e193d4b1d76a4590c41de5a5657f08394fa59fb4df757ae59fb6063771f05e30d0828bc41755ad1d43b06bf9a29

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks