General

  • Target

    83c54bf7079b8d736aa6049047bf4b05_mafia_JC.exe

  • Size

    199KB

  • Sample

    230824-ty8brsdh62

  • MD5

    83c54bf7079b8d736aa6049047bf4b05

  • SHA1

    413c37c437531a7c4563c114ada482137ec7e6a0

  • SHA256

    08f88507f4c72c0787395c5c96cae10d2330c5526a91c677dc9a48e2749ec941

  • SHA512

    c8f67cd00f352415a4d647ede2ea56f266cd7ba54300427fdd71529ca0b84b2053eafee91f8420fa328537ffd3fa4100add90f8a48116e8a968de5cdedf65eae

  • SSDEEP

    3072:vfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIg1Xi6FLPo3c:vfUauY68uSWCx+XA7mg2pNl1Ljo3c

Malware Config

Extracted

Family

oski

C2

103.155.81.167/we/soon/

Targets

    • Target

      83c54bf7079b8d736aa6049047bf4b05_mafia_JC.exe

    • Size

      199KB

    • MD5

      83c54bf7079b8d736aa6049047bf4b05

    • SHA1

      413c37c437531a7c4563c114ada482137ec7e6a0

    • SHA256

      08f88507f4c72c0787395c5c96cae10d2330c5526a91c677dc9a48e2749ec941

    • SHA512

      c8f67cd00f352415a4d647ede2ea56f266cd7ba54300427fdd71529ca0b84b2053eafee91f8420fa328537ffd3fa4100add90f8a48116e8a968de5cdedf65eae

    • SSDEEP

      3072:vfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIg1Xi6FLPo3c:vfUauY68uSWCx+XA7mg2pNl1Ljo3c

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks