Overview

overview

10

Static

static

10

9A4949EF95...BB.exe

windows7-x64

10

9A4949EF95...BB.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9A4949EF95975AFCEB281A33708EA8BCD90BE831112BB.exe

  • Size

    200KB

  • Sample

    230212-hfrerahd8x

  • MD5

    c98eba0c6b6491eaf7a05618cab679b9

  • SHA1

    76081bc414d180a6184994d352af946cf9ba631f

  • SHA256

    9a4949ef95975afceb281a33708ea8bcd90be831112bb2d89e7e3ba64a3e119a

  • SHA512

    40eca72da50a1409ed98d1a4804e2d973d9cc30f0f6cf095c95cbf1b07159cc64caa0446f897ee774e4de01e75b6df3828a3aa00f860506c9d2dc43b18f829b9

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIU1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pN11Ljo3c

Score
10/10
oskiinfostealerspywarestealer

Malware Config

Extracted

Family

oski

C2

oski.myz.info

Targets

    • Target

      9A4949EF95975AFCEB281A33708EA8BCD90BE831112BB.exe

    • Size

      200KB

    • MD5

      c98eba0c6b6491eaf7a05618cab679b9

    • SHA1

      76081bc414d180a6184994d352af946cf9ba631f

    • SHA256

      9a4949ef95975afceb281a33708ea8bcd90be831112bb2d89e7e3ba64a3e119a

    • SHA512

      40eca72da50a1409ed98d1a4804e2d973d9cc30f0f6cf095c95cbf1b07159cc64caa0446f897ee774e4de01e75b6df3828a3aa00f860506c9d2dc43b18f829b9

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIU1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pN11Ljo3c

    Score
    10/10
    oskiinfostealerspywarestealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks