General
- Target 32a1564f7474be62da3d73e7c4ea4fb5
- Size 656KB
- Sample231222-ah9ecaedfp
- SHA256 c842d544f43cc4768ee7566cec5c6f7c5bdcff367f616d8f195fc1908c2b955e
- MD5 32a1564f7474be62da3d73e7c4ea4fb5
- SHA1 c173f0239e2f823112c10cb19265ddad06dd57d8
- SHA512 deddf99783282405c89005d5d230745027b328d55e5f804671fc56b4f7e84e5081cbe32ad4c25538a8be6a1013ea7575ca23ac78c5e58f02ca1b71c3f902b5cd
- SSDEEP 12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64y8TVkc5A+:g3+Tmr+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
32a1564f7474be62da3d73e7c4ea4fb5.ps1
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
32a1564f7474be62da3d73e7c4ea4fb5.ps1
Resource
win10v2004-20231215-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
oski
C2
-
103.114.107.28/l7/
Targets
-
- Target 32a1564f7474be62da3d73e7c4ea4fb5
- Size 656KB
- SHA256 c842d544f43cc4768ee7566cec5c6f7c5bdcff367f616d8f195fc1908c2b955e
- MD5 32a1564f7474be62da3d73e7c4ea4fb5
- SHA1 c173f0239e2f823112c10cb19265ddad06dd57d8
- SHA512 deddf99783282405c89005d5d230745027b328d55e5f804671fc56b4f7e84e5081cbe32ad4c25538a8be6a1013ea7575ca23ac78c5e58f02ca1b71c3f902b5cd
- SSDEEP 12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64y8TVkc5A+:g3+Tmr+
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext