Overview

overview

10

Static

static

10

DB348DC697...23.exe

windows7-x64

10

DB348DC697...23.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DB348DC69788F96C6CCDAEDB34B150FA21AC9D275A523.exe

  • Size

    200KB

  • Sample

    221005-xhgqnafcb9

  • MD5

    092557d071b1aed5fc6340068e5dbfba

  • SHA1

    6742f81d03cbd4fa5c2263e1711fa1cf10ca2aa9

  • SHA256

    db348dc69788f96c6ccdaedb34b150fa21ac9d275a523e063b794c463d1f93a6

  • SHA512

    f06c1d075bd863deb6a4eb9d41f58db42398caf5122a96028d7fd0ba84e0636719b53a9ca4b6282d1355ff335255cf90acd2f0315c16942296fc6c8c2cf894d6

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIb1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNW1Ljo3c

Score
10/10
oskiinfostealerspywarestealer

Malware Config

Extracted

Family

oski

C2

vu.zzux.com

Targets

    • Target

      DB348DC69788F96C6CCDAEDB34B150FA21AC9D275A523.exe

    • Size

      200KB

    • MD5

      092557d071b1aed5fc6340068e5dbfba

    • SHA1

      6742f81d03cbd4fa5c2263e1711fa1cf10ca2aa9

    • SHA256

      db348dc69788f96c6ccdaedb34b150fa21ac9d275a523e063b794c463d1f93a6

    • SHA512

      f06c1d075bd863deb6a4eb9d41f58db42398caf5122a96028d7fd0ba84e0636719b53a9ca4b6282d1355ff335255cf90acd2f0315c16942296fc6c8c2cf894d6

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIb1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNW1Ljo3c

    Score
    10/10
    oskiinfostealerspywarestealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks