General
- Target 56d68b21e189451019367c59f00ee597
- Size 656KB
- Sample231222-ddbt3abde8
- SHA256 19b3d1605a53c09fa8a8fc3675c928cb5403bdef1e3bd0b3c4d69f56a06e436d
- MD5 56d68b21e189451019367c59f00ee597
- SHA1 e0074b5041539fe58295d9763693d809f0bcf1df
- SHA512 cdf7f5c3b23571c9e9dd96db40febea56abd5b9554526fe89cc6d2a66638c5d685ea08a841700042194316906b1a5332222057e983f2d2f8f130cdfb0b78e2fa
- SSDEEP 12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64a8TVkc5A+:g3CTmr+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
56d68b21e189451019367c59f00ee597.ps1
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
56d68b21e189451019367c59f00ee597.ps1
Resource
win10v2004-20231215-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
oski
C2
-
103.114.107.28/l17/
Targets
-
- Target 56d68b21e189451019367c59f00ee597
- Size 656KB
- SHA256 19b3d1605a53c09fa8a8fc3675c928cb5403bdef1e3bd0b3c4d69f56a06e436d
- MD5 56d68b21e189451019367c59f00ee597
- SHA1 e0074b5041539fe58295d9763693d809f0bcf1df
- SHA512 cdf7f5c3b23571c9e9dd96db40febea56abd5b9554526fe89cc6d2a66638c5d685ea08a841700042194316906b1a5332222057e983f2d2f8f130cdfb0b78e2fa
- SSDEEP 12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64a8TVkc5A+:g3CTmr+
- MD5 SHA1 SHA512 SSDEEP
Score10/10Suspicious use of SetThreadContext