Overview

overview

10

Static

static

1

177f321e3e...77.ps1

windows7-x64

10

177f321e3e...77.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    177f321e3e3780aeff7954abf45caf77

  • Size

    421KB

  • Sample

    231221-2lbe9seddn

  • MD5

    177f321e3e3780aeff7954abf45caf77

  • SHA1

    4d26ed973a1a3dc7d8cb938b9d73a2da065a8862

  • SHA256

    985016101e5efecfa67dd1e2c73776d1a99c7967251b3a3c7e9008b7e31279f3

  • SHA512

    fe387cba2b27b403082c09e0e8ee5f9c126ca37a583eaa93fe10e66ea6fd2c78a978f6893488e47bdfb5fc51a43d7f285f15e32be90ff004263aa5855f2aef58

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64UL68:q3v

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l37/

Targets

    • Target

      177f321e3e3780aeff7954abf45caf77

    • Size

      421KB

    • MD5

      177f321e3e3780aeff7954abf45caf77

    • SHA1

      4d26ed973a1a3dc7d8cb938b9d73a2da065a8862

    • SHA256

      985016101e5efecfa67dd1e2c73776d1a99c7967251b3a3c7e9008b7e31279f3

    • SHA512

      fe387cba2b27b403082c09e0e8ee5f9c126ca37a583eaa93fe10e66ea6fd2c78a978f6893488e47bdfb5fc51a43d7f285f15e32be90ff004263aa5855f2aef58

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64UL68:q3v

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks