General

  • Target

    B1A5D1029B72E65E2063BBDFFF90D6E6C9CE98863859D.exe

  • Size

    200KB

  • Sample

    220520-v7pfpadhdl

  • MD5

    6a24d4e31d46c2f602996981fe525fb6

  • SHA1

    4134cbbdfec13e772a5d4b7af79159248781ef04

  • SHA256

    b1a5d1029b72e65e2063bbdfff90d6e6c9ce98863859ddfa0c5f38f7afa7b770

  • SHA512

    338f1252beb06140b4ac07087b38cfa9cc6b8a116e42c448ba2a489daf5ed039d6715c2e7f2288e71d94e964eae0fae1387a00264251043ec69bb170a62f8cfe

Malware Config

Extracted

Family

oski

C2

panel.com

Targets

    • Target

      B1A5D1029B72E65E2063BBDFFF90D6E6C9CE98863859D.exe

    • Size

      200KB

    • MD5

      6a24d4e31d46c2f602996981fe525fb6

    • SHA1

      4134cbbdfec13e772a5d4b7af79159248781ef04

    • SHA256

      b1a5d1029b72e65e2063bbdfff90d6e6c9ce98863859ddfa0c5f38f7afa7b770

    • SHA512

      338f1252beb06140b4ac07087b38cfa9cc6b8a116e42c448ba2a489daf5ed039d6715c2e7f2288e71d94e964eae0fae1387a00264251043ec69bb170a62f8cfe

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • suricata: ET MALWARE Vidar/Arkei/Megumin/Oski Stealer HTTP POST Pattern

      suricata: ET MALWARE Vidar/Arkei/Megumin/Oski Stealer HTTP POST Pattern

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks