General

  • Target

    8468472ca107f2a4e267438baeaf38b4

  • Size

    421KB

  • Sample

    231222-mdkawafgdm

  • MD5

    8468472ca107f2a4e267438baeaf38b4

  • SHA1

    ef25dc88a34dbae0ee632261686082180422a01c

  • SHA256

    5b05beb197cf3fee0b18e3a5b3c12dca915553d40f7cbcffe5f32b9eda96f419

  • SHA512

    2090900bc8c53b2269d0c738abb8c162e59fee4b3e2eeb6ace516c93bb09681ef949d8f8c230546dcb08ad890ab7704f28909bac3817d8f7807109019efadd4b

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64kL68:q3v

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l1212/

Targets

    • Target

      8468472ca107f2a4e267438baeaf38b4

    • Size

      421KB

    • MD5

      8468472ca107f2a4e267438baeaf38b4

    • SHA1

      ef25dc88a34dbae0ee632261686082180422a01c

    • SHA256

      5b05beb197cf3fee0b18e3a5b3c12dca915553d40f7cbcffe5f32b9eda96f419

    • SHA512

      2090900bc8c53b2269d0c738abb8c162e59fee4b3e2eeb6ace516c93bb09681ef949d8f8c230546dcb08ad890ab7704f28909bac3817d8f7807109019efadd4b

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64kL68:q3v

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks