Overview

overview

10

Static

static

1

40b725beab...54.ps1

windows7-x64

1

40b725beab...54.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40b725beab269432755b7015c056a354

  • Size

    656KB

  • Sample

    231222-bgna6acgc8

  • MD5

    40b725beab269432755b7015c056a354

  • SHA1

    c1f36b7c607104af0772addd07e5897b58881faa

  • SHA256

    9e8c7b590d35ec86de9d2f1832c2c5291858d6ed8f07ea195074d2dc6cc523bd

  • SHA512

    b4d50994a84b82ceac45ab7b351b02b1b9376a67e81257684edb16c4353adbf9c2f68bfc74999c2206e997ae99273b0351b1570d88ec484c503fd48ad192bfb1

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64U8TVkc5A+:g3ITmr+

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l37/

Targets

    • Target

      40b725beab269432755b7015c056a354

    • Size

      656KB

    • MD5

      40b725beab269432755b7015c056a354

    • SHA1

      c1f36b7c607104af0772addd07e5897b58881faa

    • SHA256

      9e8c7b590d35ec86de9d2f1832c2c5291858d6ed8f07ea195074d2dc6cc523bd

    • SHA512

      b4d50994a84b82ceac45ab7b351b02b1b9376a67e81257684edb16c4353adbf9c2f68bfc74999c2206e997ae99273b0351b1570d88ec484c503fd48ad192bfb1

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64U8TVkc5A+:g3ITmr+

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks