Overview

overview

10

Static

static

1

0dcd00510d...46.ps1

windows7-x64

10

0dcd00510d...46.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0dcd00510d7cdf90218c8acb28802f46

  • Size

    421KB

  • Sample

    231221-11k3ksdhc8

  • MD5

    0dcd00510d7cdf90218c8acb28802f46

  • SHA1

    669ecf1747dd4b2c9251668fe38e0d42169221c8

  • SHA256

    1d430cca16d4a5663d6d59465552322e488a8f576fee2efd41d38040686b3d0f

  • SHA512

    6b0b7f810fba079e13fc7991d5ff6c4607e4f59032f6d509a45fb72ed635f4e51933ebf0ec3ef8d53fdae192d1e89980e1875221a9767336ccf82ab24e1a2914

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw640L68:q3P

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l1/

Targets

    • Target

      0dcd00510d7cdf90218c8acb28802f46

    • Size

      421KB

    • MD5

      0dcd00510d7cdf90218c8acb28802f46

    • SHA1

      669ecf1747dd4b2c9251668fe38e0d42169221c8

    • SHA256

      1d430cca16d4a5663d6d59465552322e488a8f576fee2efd41d38040686b3d0f

    • SHA512

      6b0b7f810fba079e13fc7991d5ff6c4607e4f59032f6d509a45fb72ed635f4e51933ebf0ec3ef8d53fdae192d1e89980e1875221a9767336ccf82ab24e1a2914

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw640L68:q3P

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks