General

  • Target

    315C52DA5E4E63B6F1FE534BB94C092CA45280408854C.exe

  • Size

    200KB

  • Sample

    230301-aq7kqadd4v

  • MD5

    d3287d935adf25f31d05f9b9e949e3e6

  • SHA1

    fd37221e82f5cc8ecba3eb1767e6ae1f29cee8db

  • SHA256

    315c52da5e4e63b6f1fe534bb94c092ca45280408854c23abbf23697ddd2e406

  • SHA512

    125fc90510ded9092bfc4d3bee466ad17e2d78f49cbe1cd5a32b6947ad870432e856a0a461ca53a6088a1844055636b0de91fabce8fe2c0088c9be91cba82f94

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIg1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNJ1Ljo3c

Malware Config

Extracted

Family

oski

C2

777.ultihost.net

Targets

    • Target

      315C52DA5E4E63B6F1FE534BB94C092CA45280408854C.exe

    • Size

      200KB

    • MD5

      d3287d935adf25f31d05f9b9e949e3e6

    • SHA1

      fd37221e82f5cc8ecba3eb1767e6ae1f29cee8db

    • SHA256

      315c52da5e4e63b6f1fe534bb94c092ca45280408854c23abbf23697ddd2e406

    • SHA512

      125fc90510ded9092bfc4d3bee466ad17e2d78f49cbe1cd5a32b6947ad870432e856a0a461ca53a6088a1844055636b0de91fabce8fe2c0088c9be91cba82f94

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIg1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNJ1Ljo3c

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks