General

  • Target

    21a256e5887cb8472f38a391fa9f3f07

  • Size

    485KB

  • Sample

    231221-27bm6abeg7

  • MD5

    21a256e5887cb8472f38a391fa9f3f07

  • SHA1

    e00e22ccefc0af52fbbae04a753d504a2da76dc7

  • SHA256

    2ead76cdf40f1400d4f9efa5c76c72fbe4dab4cef0c73d694836e9480d415fa1

  • SHA512

    293ae268a3690a022b609785a67639087e983ac13006ea661ad911f921766b83df6ee14e18040d9506e398a143652edd00b453c975b9a16714d061e4a7bcdaa0

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64Nigu:q3Cu

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l36/

Targets

    • Target

      21a256e5887cb8472f38a391fa9f3f07

    • Size

      485KB

    • MD5

      21a256e5887cb8472f38a391fa9f3f07

    • SHA1

      e00e22ccefc0af52fbbae04a753d504a2da76dc7

    • SHA256

      2ead76cdf40f1400d4f9efa5c76c72fbe4dab4cef0c73d694836e9480d415fa1

    • SHA512

      293ae268a3690a022b609785a67639087e983ac13006ea661ad911f921766b83df6ee14e18040d9506e398a143652edd00b453c975b9a16714d061e4a7bcdaa0

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64Nigu:q3Cu

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks