General

  • Target

    56d68b21e189451019367c59f00ee597

  • Size

    656KB

  • Sample

    231222-ddbt3abde8

  • MD5

    56d68b21e189451019367c59f00ee597

  • SHA1

    e0074b5041539fe58295d9763693d809f0bcf1df

  • SHA256

    19b3d1605a53c09fa8a8fc3675c928cb5403bdef1e3bd0b3c4d69f56a06e436d

  • SHA512

    cdf7f5c3b23571c9e9dd96db40febea56abd5b9554526fe89cc6d2a66638c5d685ea08a841700042194316906b1a5332222057e983f2d2f8f130cdfb0b78e2fa

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64a8TVkc5A+:g3CTmr+

Score
10/10

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l17/

Targets

    • Target

      56d68b21e189451019367c59f00ee597

    • Size

      656KB

    • MD5

      56d68b21e189451019367c59f00ee597

    • SHA1

      e0074b5041539fe58295d9763693d809f0bcf1df

    • SHA256

      19b3d1605a53c09fa8a8fc3675c928cb5403bdef1e3bd0b3c4d69f56a06e436d

    • SHA512

      cdf7f5c3b23571c9e9dd96db40febea56abd5b9554526fe89cc6d2a66638c5d685ea08a841700042194316906b1a5332222057e983f2d2f8f130cdfb0b78e2fa

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64a8TVkc5A+:g3CTmr+

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks