oski | afa70711d77fb4d0d0800188567a53f94679be60dee00ec3b099829456aedf9b | Triage

Sharing

General

Target

NA_NA_0b32731672b0b8exeexe_JC.exe
Size

200KB
Sample

230723-skgffsee35
MD5

0b32731672b0b86202d4e214b1cbe9e5
SHA1

6d166d45a861bdbac5aa90c5658d380b0c284867
SHA256

afa70711d77fb4d0d0800188567a53f94679be60dee00ec3b099829456aedf9b
SHA512

4e93cb26fee0156ff88b692fcde3e6a8b09c4b0f777e5d914417d41c9e29a8c4640671c367f7bd171623de2583da613c60c80bfc5ec936f0f050ab1b93dc81d0
SSDEEP

3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIl1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNY1Ljo3c

Score

10^/10

oski infostealer spyware stealer

Malware Config

Extracted

Family

oski

C2

accdemo.axwebsite.com

Targets

- Target
  
  NA_NA_0b32731672b0b8exeexe_JC.exe
- Size
  
  200KB
- MD5
  
  0b32731672b0b86202d4e214b1cbe9e5
- SHA1
  
  6d166d45a861bdbac5aa90c5658d380b0c284867
- SHA256
  
  afa70711d77fb4d0d0800188567a53f94679be60dee00ec3b099829456aedf9b
- SHA512
  
  4e93cb26fee0156ff88b692fcde3e6a8b09c4b0f777e5d914417d41c9e29a8c4640671c367f7bd171623de2583da613c60c80bfc5ec936f0f050ab1b93dc81d0
- SSDEEP
  
  3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIl1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNY1Ljo3c
Score

10^/10

oski infostealer spyware stealer
- Oski
  Oski is an infostealer targeting browser data, crypto wallets.
  infostealer oski
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

oskiinfostealerspywarestealer

behavioral2

oskiinfostealerspywarestealer