Overview

overview

10

Static

static

1

653a032aee...02.ps1

windows7-x64

1

653a032aee...02.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    653a032aee2b9a31a8610954e5c28402

  • Size

    656KB

  • Sample

    231222-e7yflafgd8

  • MD5

    653a032aee2b9a31a8610954e5c28402

  • SHA1

    ac62e4c4a9387314d4a20897ece31c163983bb46

  • SHA256

    2d759eacd3f7849f5c1bab822e4355dcc3ed418cf0640b180f0f74379f4f627b

  • SHA512

    a7e2e8eb87c86e06419a5e7b3ac3b251a238c7c37eecdeec4af8870afe084d777ca4941027567dfae3d98e5d093a4cbcb8ad9fb5d7595f9fefc7461ec3d9b771

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64M8TVkc5A+:g3ATmr+

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l2626/

Targets

    • Target

      653a032aee2b9a31a8610954e5c28402

    • Size

      656KB

    • MD5

      653a032aee2b9a31a8610954e5c28402

    • SHA1

      ac62e4c4a9387314d4a20897ece31c163983bb46

    • SHA256

      2d759eacd3f7849f5c1bab822e4355dcc3ed418cf0640b180f0f74379f4f627b

    • SHA512

      a7e2e8eb87c86e06419a5e7b3ac3b251a238c7c37eecdeec4af8870afe084d777ca4941027567dfae3d98e5d093a4cbcb8ad9fb5d7595f9fefc7461ec3d9b771

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64M8TVkc5A+:g3ATmr+

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks