General
- Target 636e799e0d2695f6d1b4fc1c32f18b77
- Size 656KB
- Sample231222-e11x5sfcd4
- SHA256 cf25db6c63cc07611931c4c4468c4e15af04130d4534caa53f59a43f863a02d1
- MD5 636e799e0d2695f6d1b4fc1c32f18b77
- SHA1 2796d78bb15c3a037eb018df31d70700be8dba41
- SHA512 fcdb45b2ad3e83f0a406650636016ffde1b60f7a7986e7526b2de168a85b13fe5ab0401a9f3fa4bbe13e074992116583d0744e704c251f02fa0b8bd6a5adc634
- SSDEEP 12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64N8TVkc5A+:g33Tmr+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
636e799e0d2695f6d1b4fc1c32f18b77.ps1
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
636e799e0d2695f6d1b4fc1c32f18b77.ps1
Resource
win10v2004-20231215-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
oski
C2
-
/103.114.107.28/l36/
Targets
-
- Target 636e799e0d2695f6d1b4fc1c32f18b77
- Size 656KB
- SHA256 cf25db6c63cc07611931c4c4468c4e15af04130d4534caa53f59a43f863a02d1
- MD5 636e799e0d2695f6d1b4fc1c32f18b77
- SHA1 2796d78bb15c3a037eb018df31d70700be8dba41
- SHA512 fcdb45b2ad3e83f0a406650636016ffde1b60f7a7986e7526b2de168a85b13fe5ab0401a9f3fa4bbe13e074992116583d0744e704c251f02fa0b8bd6a5adc634
- SSDEEP 12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64N8TVkc5A+:g33Tmr+
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext