Overview

overview

10

Static

static

1

4ce14f41f8...e3.ps1

windows7-x64

1

4ce14f41f8...e3.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ce14f41f8f79978be7cccbd3cf7fce3

  • Size

    485KB

  • Sample

    231222-cavmbseden

  • MD5

    4ce14f41f8f79978be7cccbd3cf7fce3

  • SHA1

    89c0eaa81253cfa337c567d2d62c5a28cdde6af2

  • SHA256

    52ef007565a01c258b27436c36a8122312ea201281373a83c9bbaf3b1dd12bc9

  • SHA512

    f4a38b72cacb656b307f57afca84517cc42dcc1c6819257db4e4ee02f17a9ee674cc0426fef848cae82dea23b310e14772126290e73c165a4f4bb142fff571c6

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64Migu:q3pu

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l1414/

Targets

    • Target

      4ce14f41f8f79978be7cccbd3cf7fce3

    • Size

      485KB

    • MD5

      4ce14f41f8f79978be7cccbd3cf7fce3

    • SHA1

      89c0eaa81253cfa337c567d2d62c5a28cdde6af2

    • SHA256

      52ef007565a01c258b27436c36a8122312ea201281373a83c9bbaf3b1dd12bc9

    • SHA512

      f4a38b72cacb656b307f57afca84517cc42dcc1c6819257db4e4ee02f17a9ee674cc0426fef848cae82dea23b310e14772126290e73c165a4f4bb142fff571c6

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64Migu:q3pu

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks