General

  • Target

    b008e6b92de9b7d2e18fe2712c1c0f2d86fbe86e70093e4c54c490161818992cexeexe_JC.exe

  • Size

    200KB

  • Sample

    230813-mefn3sba32

  • MD5

    b40a86d86b0b2eb794da2090b8ea1535

  • SHA1

    4d059b2cd846cad3cb1f53447bd5d14a2e648480

  • SHA256

    b008e6b92de9b7d2e18fe2712c1c0f2d86fbe86e70093e4c54c490161818992c

  • SHA512

    5e0f4dd97d2922683a7947730212813afbd7cb48f09929590dbbf5946251b15e3071fd9e3f45d78647fbc101be4f1fe7b9b1fb5a887f38df8f90b9abb2725ae8

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIE1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNt1Ljo3c

Malware Config

Extracted

Family

oski

C2

mcharglaw.com/cgi/

Targets

    • Target

      b008e6b92de9b7d2e18fe2712c1c0f2d86fbe86e70093e4c54c490161818992cexeexe_JC.exe

    • Size

      200KB

    • MD5

      b40a86d86b0b2eb794da2090b8ea1535

    • SHA1

      4d059b2cd846cad3cb1f53447bd5d14a2e648480

    • SHA256

      b008e6b92de9b7d2e18fe2712c1c0f2d86fbe86e70093e4c54c490161818992c

    • SHA512

      5e0f4dd97d2922683a7947730212813afbd7cb48f09929590dbbf5946251b15e3071fd9e3f45d78647fbc101be4f1fe7b9b1fb5a887f38df8f90b9abb2725ae8

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIE1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNt1Ljo3c

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks