Overview

overview

10

Static

static

1

0d09fe43e5...e6.ps1

windows7-x64

1

0d09fe43e5...e6.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d09fe43e5f18cd6c7a38cda8fd9f2e6

  • Size

    485KB

  • Sample

    231221-1y2mjsbdcq

  • MD5

    0d09fe43e5f18cd6c7a38cda8fd9f2e6

  • SHA1

    07baad37ee15907d9143da04abd96ee042953fc4

  • SHA256

    c01d01039b836da6585e437ff3cec6dc4a0a45b362352028b48c4ff3f0ad22c8

  • SHA512

    d36b73726d0cab82d4f35b0701b6a372b7999be85fe29b6e9223c48df11937b75ff74a0e159d9df22b9699bdcca6a69cd258f782375a8578852efedcb035d062

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64yigu:q3bu

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l7/

Targets

    • Target

      0d09fe43e5f18cd6c7a38cda8fd9f2e6

    • Size

      485KB

    • MD5

      0d09fe43e5f18cd6c7a38cda8fd9f2e6

    • SHA1

      07baad37ee15907d9143da04abd96ee042953fc4

    • SHA256

      c01d01039b836da6585e437ff3cec6dc4a0a45b362352028b48c4ff3f0ad22c8

    • SHA512

      d36b73726d0cab82d4f35b0701b6a372b7999be85fe29b6e9223c48df11937b75ff74a0e159d9df22b9699bdcca6a69cd258f782375a8578852efedcb035d062

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64yigu:q3bu

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks