General

  • Target

    2527db2a682db3ff527685efe6f22592

  • Size

    656KB

  • Sample

    231221-3ffcpsaeep

  • MD5

    2527db2a682db3ff527685efe6f22592

  • SHA1

    c1f2354b8585f2584368c65771802f3763510959

  • SHA256

    bb841def4922f297f8ec199262a65235f7ea8f5578a31fb831c9805e139f378a

  • SHA512

    d7f0b658e6df3ecdaad03435883806c890f8238f64f1ee32d8d4ee672b812f479db945f9a290544dc6f20428163b78e7620aefe39bb7630ff1c10bac4651229b

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64s8TVkc5A+:g3QTmr+

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l4040/

Targets

    • Target

      2527db2a682db3ff527685efe6f22592

    • Size

      656KB

    • MD5

      2527db2a682db3ff527685efe6f22592

    • SHA1

      c1f2354b8585f2584368c65771802f3763510959

    • SHA256

      bb841def4922f297f8ec199262a65235f7ea8f5578a31fb831c9805e139f378a

    • SHA512

      d7f0b658e6df3ecdaad03435883806c890f8238f64f1ee32d8d4ee672b812f479db945f9a290544dc6f20428163b78e7620aefe39bb7630ff1c10bac4651229b

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64s8TVkc5A+:g3QTmr+

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks