General

  • Target

    4e1f1d9bf4b4f09c83818b2947972800

  • Size

    485KB

  • Sample

    231222-cd1bzsgha8

  • MD5

    4e1f1d9bf4b4f09c83818b2947972800

  • SHA1

    cee9f50edc0d0c47e318a5be68750422e53d6ae2

  • SHA256

    f65e34cc627483978d2d832b23311e8634bf8689459a921e7fc5b2b3750c502b

  • SHA512

    0a772ff38ea7819d2a5544d55d6cc3ffbb3326a0fd3fa4b5db2af2a6880a1e1a8b3b4d812d7d811d4a7ffa141984677a2dd1fdfb1c4105baad233f06cf625e8c

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64bigu:q3Uu

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l38/

Targets

    • Target

      4e1f1d9bf4b4f09c83818b2947972800

    • Size

      485KB

    • MD5

      4e1f1d9bf4b4f09c83818b2947972800

    • SHA1

      cee9f50edc0d0c47e318a5be68750422e53d6ae2

    • SHA256

      f65e34cc627483978d2d832b23311e8634bf8689459a921e7fc5b2b3750c502b

    • SHA512

      0a772ff38ea7819d2a5544d55d6cc3ffbb3326a0fd3fa4b5db2af2a6880a1e1a8b3b4d812d7d811d4a7ffa141984677a2dd1fdfb1c4105baad233f06cf625e8c

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64bigu:q3Uu

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks