General

  • Target

    0446466ac12756312798acc282f43f42

  • Size

    421KB

  • Sample

    231221-zgd99adbbm

  • MD5

    0446466ac12756312798acc282f43f42

  • SHA1

    3fd7350b0fb7a5f6954133aef52225d7d43b3089

  • SHA256

    bd9cbcbfd7a897facee368f30d798f2b6cf4bb4aaf1b3301de96e691a6a5ce18

  • SHA512

    5af139c0d939faab146582a2e539011133f21f5514ec46e9065e1ab04820dd33541eaa90fe2c0b7e1dea8a3aeea0a90a20562dad5598249979e513ede0af333e

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64cL68:q3H

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l2828/

Targets

    • Target

      0446466ac12756312798acc282f43f42

    • Size

      421KB

    • MD5

      0446466ac12756312798acc282f43f42

    • SHA1

      3fd7350b0fb7a5f6954133aef52225d7d43b3089

    • SHA256

      bd9cbcbfd7a897facee368f30d798f2b6cf4bb4aaf1b3301de96e691a6a5ce18

    • SHA512

      5af139c0d939faab146582a2e539011133f21f5514ec46e9065e1ab04820dd33541eaa90fe2c0b7e1dea8a3aeea0a90a20562dad5598249979e513ede0af333e

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64cL68:q3H

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks