General

  • Target

    91bf601ab3b4c07416e308248528e8f1

  • Size

    656KB

  • Sample

    231222-p5ln5aebb7

  • MD5

    91bf601ab3b4c07416e308248528e8f1

  • SHA1

    79680965ebe4b084fe04c874365030bff782839b

  • SHA256

    983594ed65e67379223bb39d0205948c679bca82fff8018080e7e8aa01aa1fbb

  • SHA512

    a17cc6cb23ae5d63f0ae486b2129b24a55d42b2152f346198781612ccb9a0d8874e553516ade6480de3571599655f9e9d5013706b1d122beeb5ee6459ee423e1

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64b8TVkc5A+:g3dTmr+

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l38/

Targets

    • Target

      91bf601ab3b4c07416e308248528e8f1

    • Size

      656KB

    • MD5

      91bf601ab3b4c07416e308248528e8f1

    • SHA1

      79680965ebe4b084fe04c874365030bff782839b

    • SHA256

      983594ed65e67379223bb39d0205948c679bca82fff8018080e7e8aa01aa1fbb

    • SHA512

      a17cc6cb23ae5d63f0ae486b2129b24a55d42b2152f346198781612ccb9a0d8874e553516ade6480de3571599655f9e9d5013706b1d122beeb5ee6459ee423e1

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64b8TVkc5A+:g3dTmr+

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks