Overview

overview

10

Static

static

10

315C52DA5E...4C.exe

windows7-x64

10

315C52DA5E...4C.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    315C52DA5E4E63B6F1FE534BB94C092CA45280408854C.exe

  • Size

    200KB

  • Sample

    230301-aq7kqadd4v

  • MD5

    d3287d935adf25f31d05f9b9e949e3e6

  • SHA1

    fd37221e82f5cc8ecba3eb1767e6ae1f29cee8db

  • SHA256

    315c52da5e4e63b6f1fe534bb94c092ca45280408854c23abbf23697ddd2e406

  • SHA512

    125fc90510ded9092bfc4d3bee466ad17e2d78f49cbe1cd5a32b6947ad870432e856a0a461ca53a6088a1844055636b0de91fabce8fe2c0088c9be91cba82f94

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIg1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNJ1Ljo3c

Score
10/10
oskiinfostealerspywarestealer

Malware Config

Extracted

Family

oski

C2

777.ultihost.net

Targets

    • Target

      315C52DA5E4E63B6F1FE534BB94C092CA45280408854C.exe

    • Size

      200KB

    • MD5

      d3287d935adf25f31d05f9b9e949e3e6

    • SHA1

      fd37221e82f5cc8ecba3eb1767e6ae1f29cee8db

    • SHA256

      315c52da5e4e63b6f1fe534bb94c092ca45280408854c23abbf23697ddd2e406

    • SHA512

      125fc90510ded9092bfc4d3bee466ad17e2d78f49cbe1cd5a32b6947ad870432e856a0a461ca53a6088a1844055636b0de91fabce8fe2c0088c9be91cba82f94

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIg1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNJ1Ljo3c

    Score
    10/10
    oskiinfostealerspywarestealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks