Overview

overview

10

Static

static

1

63fccd4437...27.ps1

windows7-x64

10

63fccd4437...27.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63fccd4437a1fc5ec961bd80801aa027

  • Size

    421KB

  • Sample

    231222-e3mtasddhq

  • MD5

    63fccd4437a1fc5ec961bd80801aa027

  • SHA1

    2718a421713bab972ad9d3f3021942042bbbfb15

  • SHA256

    74ba11de6f8b9142125db80bdba421638a3d002ef77d7231e96081757920ebcc

  • SHA512

    93b0a1cd0212e5114caaf3a501c87f31c205e3c4e5782bf3672fcd479b3414739a64e499612530c63544e7f984665eb8abd0e59c92f8163eb4b63305961ea7a1

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64cL68:q3X

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l1919/

Targets

    • Target

      63fccd4437a1fc5ec961bd80801aa027

    • Size

      421KB

    • MD5

      63fccd4437a1fc5ec961bd80801aa027

    • SHA1

      2718a421713bab972ad9d3f3021942042bbbfb15

    • SHA256

      74ba11de6f8b9142125db80bdba421638a3d002ef77d7231e96081757920ebcc

    • SHA512

      93b0a1cd0212e5114caaf3a501c87f31c205e3c4e5782bf3672fcd479b3414739a64e499612530c63544e7f984665eb8abd0e59c92f8163eb4b63305961ea7a1

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64cL68:q3X

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks