General
-
Target
https://www.upload.ee/files/14365900/Oski_Stealer.rar.html
-
Sample
220916-ve5bfacabn
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.upload.ee/files/14365900/Oski_Stealer.rar.html
Resource
win7-20220901-en
windows7-x64
17 signatures
1800 seconds
Behavioral task
behavioral2
Sample
https://www.upload.ee/files/14365900/Oski_Stealer.rar.html
Resource
win10-20220812-en
windows10-1703-x64
18 signatures
1800 seconds
Behavioral task
behavioral3
Sample
https://www.upload.ee/files/14365900/Oski_Stealer.rar.html
Resource
win10v2004-20220812-en
windows10-2004-x64
7 signatures
1800 seconds
Malware Config
Extracted
Family
oski
C2
62.77.159.212
panel.com
Targets
-
-
Target
https://www.upload.ee/files/14365900/Oski_Stealer.rar.html
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-