General

  • Target

    54d62e92b93a40149d7e4fa19b798201

  • Size

    421KB

  • Sample

    231222-c6w52aagh7

  • MD5

    54d62e92b93a40149d7e4fa19b798201

  • SHA1

    0404240f6104722844ace07eb116d5edbc7a4c18

  • SHA256

    1384fedda1a2064b73982c64c756d109b16979a61ced905b338e7ad044c5e2f1

  • SHA512

    0591e4987caad59642fb39d929465487b8d5290197b924f1a33bcf8ba5389d5a4a9d97af61b0284199e64c0b281ff41d634b9a8c4df2ef8e02e8a96842e3f4c1

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64ML68:q33

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l2626/

Targets

    • Target

      54d62e92b93a40149d7e4fa19b798201

    • Size

      421KB

    • MD5

      54d62e92b93a40149d7e4fa19b798201

    • SHA1

      0404240f6104722844ace07eb116d5edbc7a4c18

    • SHA256

      1384fedda1a2064b73982c64c756d109b16979a61ced905b338e7ad044c5e2f1

    • SHA512

      0591e4987caad59642fb39d929465487b8d5290197b924f1a33bcf8ba5389d5a4a9d97af61b0284199e64c0b281ff41d634b9a8c4df2ef8e02e8a96842e3f4c1

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64ML68:q33

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks