General

  • Target

    3d793ab63dcd431fa16d38ec5ab1f9c7

  • Size

    421KB

  • Sample

    231222-a91xaahgdl

  • MD5

    3d793ab63dcd431fa16d38ec5ab1f9c7

  • SHA1

    74c4de4e37b5ffa5f7845541efad58c64c566928

  • SHA256

    8aab64d02092bea3f4a51f06b243b41c80492c92b3b83997c7e498fd69e10506

  • SHA512

    5db3733da6a7e60c3f3cc8c20902aaf04a449e82eb9920aa7c0462fc3741390778ad1b0f8eae0f7c65b6967bffc6cb68b2e34811627f61023f8690470eeafa30

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64fL68:q3w

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l25/

Targets

    • Target

      3d793ab63dcd431fa16d38ec5ab1f9c7

    • Size

      421KB

    • MD5

      3d793ab63dcd431fa16d38ec5ab1f9c7

    • SHA1

      74c4de4e37b5ffa5f7845541efad58c64c566928

    • SHA256

      8aab64d02092bea3f4a51f06b243b41c80492c92b3b83997c7e498fd69e10506

    • SHA512

      5db3733da6a7e60c3f3cc8c20902aaf04a449e82eb9920aa7c0462fc3741390778ad1b0f8eae0f7c65b6967bffc6cb68b2e34811627f61023f8690470eeafa30

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64fL68:q3w

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks