General

  • Target

    ead85de4981024fac4478ca11dafb3ba_mafia_JC.exe

  • Size

    199KB

  • Sample

    230830-xd1mzahh58

  • MD5

    ead85de4981024fac4478ca11dafb3ba

  • SHA1

    7eb26917e3bb3fc565697f4268f6f64dd5e07f82

  • SHA256

    357c49ca6c5ce321fae8734313736081d156430a06ac06c1bf054167e509579a

  • SHA512

    239e29933f21edcd4513fefc00562dffbace4f0e235a47fa704f2774b51b5ea88af6a0d5039e204e389ba368db4b64c3c6adb4452955f950447b6a0897040efb

  • SSDEEP

    3072:vfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIj1Xi6FLPo3c:vfUauY68uSWCx+XA7mg2pNe1Ljo3c

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l4040/

Targets

    • Target

      ead85de4981024fac4478ca11dafb3ba_mafia_JC.exe

    • Size

      199KB

    • MD5

      ead85de4981024fac4478ca11dafb3ba

    • SHA1

      7eb26917e3bb3fc565697f4268f6f64dd5e07f82

    • SHA256

      357c49ca6c5ce321fae8734313736081d156430a06ac06c1bf054167e509579a

    • SHA512

      239e29933f21edcd4513fefc00562dffbace4f0e235a47fa704f2774b51b5ea88af6a0d5039e204e389ba368db4b64c3c6adb4452955f950447b6a0897040efb

    • SSDEEP

      3072:vfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIj1Xi6FLPo3c:vfUauY68uSWCx+XA7mg2pNe1Ljo3c

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks