General

  • Target

    537dafbf2acf47786823913fcb138634

  • Size

    656KB

  • Sample

    231222-c1x55sade5

  • MD5

    537dafbf2acf47786823913fcb138634

  • SHA1

    750303a51406a6947f8c5043c9010a0f95590522

  • SHA256

    3a7ddba50c414ef70d1796f1e3eef20b1684811f03a0c400d5388a0079ef4ce5

  • SHA512

    778a88719be802f22facc88dbd0a19a153c5c2e79e043f2db0c4b4bb8995972a37485738763365ccc1815742fc183110f6f6c699532ccbe1034395fe0dfb7006

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64c8TVkc5A+:g3gTmr+

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l1919/

Targets

    • Target

      537dafbf2acf47786823913fcb138634

    • Size

      656KB

    • MD5

      537dafbf2acf47786823913fcb138634

    • SHA1

      750303a51406a6947f8c5043c9010a0f95590522

    • SHA256

      3a7ddba50c414ef70d1796f1e3eef20b1684811f03a0c400d5388a0079ef4ce5

    • SHA512

      778a88719be802f22facc88dbd0a19a153c5c2e79e043f2db0c4b4bb8995972a37485738763365ccc1815742fc183110f6f6c699532ccbe1034395fe0dfb7006

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64c8TVkc5A+:g3gTmr+

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks