General

  • Target

    5846789565ba970c2805bbf5fb1a5b5b

  • Size

    656KB

  • Sample

    231222-djr38sbge8

  • MD5

    5846789565ba970c2805bbf5fb1a5b5b

  • SHA1

    2759d9242087a839b855e825d013fcacb2c6010c

  • SHA256

    e16da7ccdfd691ea919b69ab74f26cb56958faba2aa142fbe6be49d080c23aeb

  • SHA512

    d4e70ca5350ca6e94053a742e19b04f973fb2c42bb9c771524fa21c1f7cd9d829333d9d557c21065575d95cfcc77d4aac0f30fe9445ca4ef6682968c4d727042

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64E8TVkc5A+:g3ITmr+

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l1616/

Targets

    • Target

      5846789565ba970c2805bbf5fb1a5b5b

    • Size

      656KB

    • MD5

      5846789565ba970c2805bbf5fb1a5b5b

    • SHA1

      2759d9242087a839b855e825d013fcacb2c6010c

    • SHA256

      e16da7ccdfd691ea919b69ab74f26cb56958faba2aa142fbe6be49d080c23aeb

    • SHA512

      d4e70ca5350ca6e94053a742e19b04f973fb2c42bb9c771524fa21c1f7cd9d829333d9d557c21065575d95cfcc77d4aac0f30fe9445ca4ef6682968c4d727042

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64E8TVkc5A+:g3ITmr+

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks