General

  • Target

    2f822664107e39c75a110358c1142687_mafia_JC.exe

  • Size

    199KB

  • Sample

    230818-smfxpscf3y

  • MD5

    2f822664107e39c75a110358c1142687

  • SHA1

    bc31aac8a32be0c9a4e9c08082d2c324f03aea29

  • SHA256

    c59e76375979f09a387a42dcfc3311a0214faf0368f5eacd6b6d0e6d74d41362

  • SHA512

    79bae31e85f178e8ced1e90be704a3431a1299873cdbb5b5b0ef06a9cf070da1e6380ced3a09c915652dd127d085ec44fc78307872b2b96df47a16b0ee41d716

  • SSDEEP

    3072:vfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIL1Xi6FLPo3c:vfUauY68uSWCx+XA7mg2pNu1Ljo3c

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l9/

Targets

    • Target

      2f822664107e39c75a110358c1142687_mafia_JC.exe

    • Size

      199KB

    • MD5

      2f822664107e39c75a110358c1142687

    • SHA1

      bc31aac8a32be0c9a4e9c08082d2c324f03aea29

    • SHA256

      c59e76375979f09a387a42dcfc3311a0214faf0368f5eacd6b6d0e6d74d41362

    • SHA512

      79bae31e85f178e8ced1e90be704a3431a1299873cdbb5b5b0ef06a9cf070da1e6380ced3a09c915652dd127d085ec44fc78307872b2b96df47a16b0ee41d716

    • SSDEEP

      3072:vfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIL1Xi6FLPo3c:vfUauY68uSWCx+XA7mg2pNu1Ljo3c

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks