General
- Target 21a256e5887cb8472f38a391fa9f3f07
- Size 485KB
- Sample231221-27bm6abeg7
- SHA256 2ead76cdf40f1400d4f9efa5c76c72fbe4dab4cef0c73d694836e9480d415fa1
- MD5 21a256e5887cb8472f38a391fa9f3f07
- SHA1 e00e22ccefc0af52fbbae04a753d504a2da76dc7
- SHA512 293ae268a3690a022b609785a67639087e983ac13006ea661ad911f921766b83df6ee14e18040d9506e398a143652edd00b453c975b9a16714d061e4a7bcdaa0
- SSDEEP 12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64Nigu:q3Cu
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
21a256e5887cb8472f38a391fa9f3f07.ps1
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
21a256e5887cb8472f38a391fa9f3f07.ps1
Resource
win10v2004-20231215-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
oski
C2
-
/103.114.107.28/l36/
Targets
-
- Target 21a256e5887cb8472f38a391fa9f3f07
- Size 485KB
- SHA256 2ead76cdf40f1400d4f9efa5c76c72fbe4dab4cef0c73d694836e9480d415fa1
- MD5 21a256e5887cb8472f38a391fa9f3f07
- SHA1 e00e22ccefc0af52fbbae04a753d504a2da76dc7
- SHA512 293ae268a3690a022b609785a67639087e983ac13006ea661ad911f921766b83df6ee14e18040d9506e398a143652edd00b453c975b9a16714d061e4a7bcdaa0
- SSDEEP 12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64Nigu:q3Cu
- MD5 SHA1 SHA512 SSDEEP
Score10/10Suspicious use of SetThreadContext