Overview

overview

10

Static

static

1

67b72b574b...ed.ps1

windows7-x64

10

67b72b574b...ed.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67b72b574b52873730e274250feef9ed

  • Size

    421KB

  • Sample

    231222-fgbdtagee3

  • MD5

    67b72b574b52873730e274250feef9ed

  • SHA1

    ef44d31846ad814cd2d7cf20ce071bdd2d4eac41

  • SHA256

    c66d5ae5f1cc7e8a8c0047e51ce2f5a94de960f63ea2107aaf60bebce75fb2bb

  • SHA512

    67babcc41723ef944a90463ba65fc20ec1cac472f98b5c84942dfa58af004097333d762a9147fa6fd7956fec9febf60fb3e916c73ceba83e50c5a4d187f45617

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64eL68:q3N

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l3/

Targets

    • Target

      67b72b574b52873730e274250feef9ed

    • Size

      421KB

    • MD5

      67b72b574b52873730e274250feef9ed

    • SHA1

      ef44d31846ad814cd2d7cf20ce071bdd2d4eac41

    • SHA256

      c66d5ae5f1cc7e8a8c0047e51ce2f5a94de960f63ea2107aaf60bebce75fb2bb

    • SHA512

      67babcc41723ef944a90463ba65fc20ec1cac472f98b5c84942dfa58af004097333d762a9147fa6fd7956fec9febf60fb3e916c73ceba83e50c5a4d187f45617

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64eL68:q3N

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks