General

  • Target

    6cb56ad248abbad6b57ae9b444e05680

  • Size

    485KB

  • Sample

    231222-fnwy4agafq

  • MD5

    6cb56ad248abbad6b57ae9b444e05680

  • SHA1

    4b877bee7ec22b493bfead901ccb6ea433cb232b

  • SHA256

    ebb3eb34385b4a892410989d1133ed0cdff8417534e2d5c8407b95923a0b35b4

  • SHA512

    1d25eeabdc288ef0108e4307fa30815c261e6b4997f3dab5687520a738818203dc129c8eeecf03ae5ebe31209f628b762e1b997f00a72e47df76bde78a707fbc

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64cigu:q3pu

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l2828/

Targets

    • Target

      6cb56ad248abbad6b57ae9b444e05680

    • Size

      485KB

    • MD5

      6cb56ad248abbad6b57ae9b444e05680

    • SHA1

      4b877bee7ec22b493bfead901ccb6ea433cb232b

    • SHA256

      ebb3eb34385b4a892410989d1133ed0cdff8417534e2d5c8407b95923a0b35b4

    • SHA512

      1d25eeabdc288ef0108e4307fa30815c261e6b4997f3dab5687520a738818203dc129c8eeecf03ae5ebe31209f628b762e1b997f00a72e47df76bde78a707fbc

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64cigu:q3pu

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks