oski | 41052d6a6b62bda012dbfd2c47b00943bfe395745917e3bc187fcd07870c3bc0 | Triage

Sharing

General

Target

41052D6A6B62BDA012DBFD2C47B00943BFE395745917E.exe
Size

200KB
Sample

221126-3y1flaeb45
MD5

d0f80611b76764282e5615af48601d6d
SHA1

87b520ee21626677db6d92cf26bd10131e8c7ac5
SHA256

41052d6a6b62bda012dbfd2c47b00943bfe395745917e3bc187fcd07870c3bc0
SHA512

f30598b75baab9e241979070c10f86a1c43329f1bc033f37f04a45d4825f828a2b35b73f74962f3965cd8491520c8cd21b54752dd94b0ff93b3f652e43ce7ece
SSDEEP

3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIE1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNx1Ljo3c

Score

10^/10

oski infostealer spyware stealer

Malware Config

Extracted

Family

oski

C2

brakiporodica.org

Targets

- Target
  
  41052D6A6B62BDA012DBFD2C47B00943BFE395745917E.exe
- Size
  
  200KB
- MD5
  
  d0f80611b76764282e5615af48601d6d
- SHA1
  
  87b520ee21626677db6d92cf26bd10131e8c7ac5
- SHA256
  
  41052d6a6b62bda012dbfd2c47b00943bfe395745917e3bc187fcd07870c3bc0
- SHA512
  
  f30598b75baab9e241979070c10f86a1c43329f1bc033f37f04a45d4825f828a2b35b73f74962f3965cd8491520c8cd21b54752dd94b0ff93b3f652e43ce7ece
- SSDEEP
  
  3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIE1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNx1Ljo3c
Score

10^/10

oski infostealer spyware stealer
- Oski
  Oski is an infostealer targeting browser data, crypto wallets.
  infostealer oski
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

oskiinfostealerspywarestealer

behavioral2

oskiinfostealerspywarestealer