General

  • Target

    219233774e3dcd6769eb7867ad3ba169

  • Size

    421KB

  • Sample

    231221-267n7sbef6

  • MD5

    219233774e3dcd6769eb7867ad3ba169

  • SHA1

    fe90764e5d79c331f8a8af20e6bd3da5b2674ac2

  • SHA256

    181a988534aeb9dcec48736c09e7e54373f63f178474af3f973ec21f54f32095

  • SHA512

    f94e1d61b52b8fc2f863bdfc2fa8bd71f9db3cfbccd4c70fec3acdba912816898c1ab4d106910cff7034dbd8e88fbef00d4c23ee187218a407a57fbb2788818c

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64EL68:q3f

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l3131/

Targets

    • Target

      219233774e3dcd6769eb7867ad3ba169

    • Size

      421KB

    • MD5

      219233774e3dcd6769eb7867ad3ba169

    • SHA1

      fe90764e5d79c331f8a8af20e6bd3da5b2674ac2

    • SHA256

      181a988534aeb9dcec48736c09e7e54373f63f178474af3f973ec21f54f32095

    • SHA512

      f94e1d61b52b8fc2f863bdfc2fa8bd71f9db3cfbccd4c70fec3acdba912816898c1ab4d106910cff7034dbd8e88fbef00d4c23ee187218a407a57fbb2788818c

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64EL68:q3f

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks