Overview

overview

10

Static

static

1

936e261d17...56.ps1

windows7-x64

1

936e261d17...56.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    936e261d17eb17f3d72d1b95460f6956

  • Size

    485KB

  • Sample

    231222-p7bxpsefa3

  • MD5

    936e261d17eb17f3d72d1b95460f6956

  • SHA1

    26f6e4b3c1cfc7b9cc502ee7a0f5faaa9261a6b2

  • SHA256

    2dc9af3230375f72ebcd07c13ec2c1a6ed4786bdc1beebb0cec324ee0ddc7587

  • SHA512

    e401d49013edb278b8b34f480b7f5d08029fd541b34442bed34501f694555ec6808e37620a4083c9662b18ea3dfc6317f7eec300d79bc28364d6b69733eaec51

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64Sigu:q3Hu

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l20/

Targets

    • Target

      936e261d17eb17f3d72d1b95460f6956

    • Size

      485KB

    • MD5

      936e261d17eb17f3d72d1b95460f6956

    • SHA1

      26f6e4b3c1cfc7b9cc502ee7a0f5faaa9261a6b2

    • SHA256

      2dc9af3230375f72ebcd07c13ec2c1a6ed4786bdc1beebb0cec324ee0ddc7587

    • SHA512

      e401d49013edb278b8b34f480b7f5d08029fd541b34442bed34501f694555ec6808e37620a4083c9662b18ea3dfc6317f7eec300d79bc28364d6b69733eaec51

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64Sigu:q3Hu

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks