General

  • Target

    41052D6A6B62BDA012DBFD2C47B00943BFE395745917E.exe

  • Size

    200KB

  • Sample

    221126-3y1flaeb45

  • MD5

    d0f80611b76764282e5615af48601d6d

  • SHA1

    87b520ee21626677db6d92cf26bd10131e8c7ac5

  • SHA256

    41052d6a6b62bda012dbfd2c47b00943bfe395745917e3bc187fcd07870c3bc0

  • SHA512

    f30598b75baab9e241979070c10f86a1c43329f1bc033f37f04a45d4825f828a2b35b73f74962f3965cd8491520c8cd21b54752dd94b0ff93b3f652e43ce7ece

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIE1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNx1Ljo3c

Malware Config

Extracted

Family

oski

C2

brakiporodica.org

Targets

    • Target

      41052D6A6B62BDA012DBFD2C47B00943BFE395745917E.exe

    • Size

      200KB

    • MD5

      d0f80611b76764282e5615af48601d6d

    • SHA1

      87b520ee21626677db6d92cf26bd10131e8c7ac5

    • SHA256

      41052d6a6b62bda012dbfd2c47b00943bfe395745917e3bc187fcd07870c3bc0

    • SHA512

      f30598b75baab9e241979070c10f86a1c43329f1bc033f37f04a45d4825f828a2b35b73f74962f3965cd8491520c8cd21b54752dd94b0ff93b3f652e43ce7ece

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIE1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNx1Ljo3c

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks