General
- Target 25190ed01b56665dc1ef07932f781619
- Size 421KB
- Sample231221-3fbphsaedl
- SHA256 28022f04aeecc3944f89980f905b714d267dfba617e4b803eb1b1b38fee7371f
- MD5 25190ed01b56665dc1ef07932f781619
- SHA1 76818f1ba247c986f8d1aea6495b052ee39aa11e
- SHA512 988a7b4b123d27a38c2e45056267f61404bd3b2d622d8c3552e137830722a3c4f04de6428324f11552a94b1b2a1682f45428ed1d3f2d2ae7d9221441af88a200
- SSDEEP 12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64tL68:q3u
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
25190ed01b56665dc1ef07932f781619.ps1
Resource
win7-20231215-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
25190ed01b56665dc1ef07932f781619.ps1
Resource
win10v2004-20231215-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
oski
C2
-
/103.114.107.28/l606/
Targets
-
- Target 25190ed01b56665dc1ef07932f781619
- Size 421KB
- SHA256 28022f04aeecc3944f89980f905b714d267dfba617e4b803eb1b1b38fee7371f
- MD5 25190ed01b56665dc1ef07932f781619
- SHA1 76818f1ba247c986f8d1aea6495b052ee39aa11e
- SHA512 988a7b4b123d27a38c2e45056267f61404bd3b2d622d8c3552e137830722a3c4f04de6428324f11552a94b1b2a1682f45428ed1d3f2d2ae7d9221441af88a200
- SSDEEP 12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64tL68:q3u
- MD5 SHA1 SHA512 SSDEEP
Score10/10Suspicious use of SetThreadContext