General

  • Target

    527081E5DE003C6DBBEF8AAFCCDF3648E7624A55B79FC.exe

  • Size

    200KB

  • Sample

    221130-wslxpaff3x

  • MD5

    841cc2a1b0b7bd037d7ce4bff9a067df

  • SHA1

    904525e4b5599227fd1860bda78962b87ccee2a9

  • SHA256

    527081e5de003c6dbbef8aafccdf3648e7624a55b79fcfa642dd9ef7e838e995

  • SHA512

    e4116ed6117d3346029cecd15832dca1a4491776af0e8566910dd3f38fb18d0e5fdbfd595ec677411a5a327eebba67e03aec781cfa428358d2ecd259c4df1f8d

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fId1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pN41Ljo3c

Malware Config

Extracted

Family

oski

C2

madamongo.gq

Targets

    • Target

      527081E5DE003C6DBBEF8AAFCCDF3648E7624A55B79FC.exe

    • Size

      200KB

    • MD5

      841cc2a1b0b7bd037d7ce4bff9a067df

    • SHA1

      904525e4b5599227fd1860bda78962b87ccee2a9

    • SHA256

      527081e5de003c6dbbef8aafccdf3648e7624a55b79fcfa642dd9ef7e838e995

    • SHA512

      e4116ed6117d3346029cecd15832dca1a4491776af0e8566910dd3f38fb18d0e5fdbfd595ec677411a5a327eebba67e03aec781cfa428358d2ecd259c4df1f8d

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fId1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pN41Ljo3c

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks