General
- Target 653a032aee2b9a31a8610954e5c28402
- Size 656KB
- Sample231222-e7yflafgd8
- SHA256 2d759eacd3f7849f5c1bab822e4355dcc3ed418cf0640b180f0f74379f4f627b
- MD5 653a032aee2b9a31a8610954e5c28402
- SHA1 ac62e4c4a9387314d4a20897ece31c163983bb46
- SHA512 a7e2e8eb87c86e06419a5e7b3ac3b251a238c7c37eecdeec4af8870afe084d777ca4941027567dfae3d98e5d093a4cbcb8ad9fb5d7595f9fefc7461ec3d9b771
- SSDEEP 12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64M8TVkc5A+:g3ATmr+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
653a032aee2b9a31a8610954e5c28402.ps1
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
653a032aee2b9a31a8610954e5c28402.ps1
Resource
win10v2004-20231215-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
oski
C2
-
/103.114.107.28/l2626/
Targets
-
- Target 653a032aee2b9a31a8610954e5c28402
- Size 656KB
- SHA256 2d759eacd3f7849f5c1bab822e4355dcc3ed418cf0640b180f0f74379f4f627b
- MD5 653a032aee2b9a31a8610954e5c28402
- SHA1 ac62e4c4a9387314d4a20897ece31c163983bb46
- SHA512 a7e2e8eb87c86e06419a5e7b3ac3b251a238c7c37eecdeec4af8870afe084d777ca4941027567dfae3d98e5d093a4cbcb8ad9fb5d7595f9fefc7461ec3d9b771
- SSDEEP 12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64M8TVkc5A+:g3ATmr+
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of SetThreadContext