General

  • Target

    28911267f7db0fbdec9a4efae56e4f35

  • Size

    248KB

  • Sample

    231219-p2hs3ahdb7

  • MD5

    28911267f7db0fbdec9a4efae56e4f35

  • SHA1

    39ad01109f81e0177c8b88132e677dade0f998e1

  • SHA256

    5d9e9eec843781fcd39a0dfe23f9b9b6468cbf23ca327e1acedf8567b612cd38

  • SHA512

    7eb8916eb81b4866f73bb78f1f5651cd483fa46017f7f86e993d9fb882732c2f8e2878fe2c68ce3a75e364cf181f2da23f3904dfe9a58e08713d81731927844a

  • SSDEEP

    6144:V7AFPOns551dxzAUdYKHWqLHWm00RLqp0axj3N:Vaj51ddxdq6NM2axTN

Malware Config

Extracted

Family

oski

C2

scarsa.ac.ug

Targets

    • Target

      28911267f7db0fbdec9a4efae56e4f35

    • Size

      248KB

    • MD5

      28911267f7db0fbdec9a4efae56e4f35

    • SHA1

      39ad01109f81e0177c8b88132e677dade0f998e1

    • SHA256

      5d9e9eec843781fcd39a0dfe23f9b9b6468cbf23ca327e1acedf8567b612cd38

    • SHA512

      7eb8916eb81b4866f73bb78f1f5651cd483fa46017f7f86e993d9fb882732c2f8e2878fe2c68ce3a75e364cf181f2da23f3904dfe9a58e08713d81731927844a

    • SSDEEP

      6144:V7AFPOns551dxzAUdYKHWqLHWm00RLqp0axj3N:Vaj51ddxdq6NM2axTN

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks