Overview

overview

10

Static

static

10

527081E5DE...FC.exe

windows7-x64

10

527081E5DE...FC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    527081E5DE003C6DBBEF8AAFCCDF3648E7624A55B79FC.exe

  • Size

    200KB

  • Sample

    221206-sms72ahf65

  • MD5

    841cc2a1b0b7bd037d7ce4bff9a067df

  • SHA1

    904525e4b5599227fd1860bda78962b87ccee2a9

  • SHA256

    527081e5de003c6dbbef8aafccdf3648e7624a55b79fcfa642dd9ef7e838e995

  • SHA512

    e4116ed6117d3346029cecd15832dca1a4491776af0e8566910dd3f38fb18d0e5fdbfd595ec677411a5a327eebba67e03aec781cfa428358d2ecd259c4df1f8d

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fId1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pN41Ljo3c

Score
10/10
oskiinfostealerspywarestealer

Malware Config

Extracted

Family

oski

C2

madamongo.gq

Targets

    • Target

      527081E5DE003C6DBBEF8AAFCCDF3648E7624A55B79FC.exe

    • Size

      200KB

    • MD5

      841cc2a1b0b7bd037d7ce4bff9a067df

    • SHA1

      904525e4b5599227fd1860bda78962b87ccee2a9

    • SHA256

      527081e5de003c6dbbef8aafccdf3648e7624a55b79fcfa642dd9ef7e838e995

    • SHA512

      e4116ed6117d3346029cecd15832dca1a4491776af0e8566910dd3f38fb18d0e5fdbfd595ec677411a5a327eebba67e03aec781cfa428358d2ecd259c4df1f8d

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fId1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pN41Ljo3c

    Score
    10/10
    oskiinfostealerspywarestealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks