General

  • Target

    94e73932bf2784e31572c764f982d4d0

  • Size

    656KB

  • Sample

    231222-p8slvacggj

  • MD5

    94e73932bf2784e31572c764f982d4d0

  • SHA1

    73a644b56f6f279596b4fcece37214d50cabbb8d

  • SHA256

    0bed22946ec72f99934b49d8c96259617e09f598f94c423178425fbe23fa0a80

  • SHA512

    e1c57443dc543264337095df291a0b0b5e69d0e7c359b0ea01cddbb9b3e176d57a07198ff8086a11d7e44a066983831d895a0d7fdd0fbe24e65a94039e0deb43

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw6448TVkc5A+:g38Tmr+

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l22/

Targets

    • Target

      94e73932bf2784e31572c764f982d4d0

    • Size

      656KB

    • MD5

      94e73932bf2784e31572c764f982d4d0

    • SHA1

      73a644b56f6f279596b4fcece37214d50cabbb8d

    • SHA256

      0bed22946ec72f99934b49d8c96259617e09f598f94c423178425fbe23fa0a80

    • SHA512

      e1c57443dc543264337095df291a0b0b5e69d0e7c359b0ea01cddbb9b3e176d57a07198ff8086a11d7e44a066983831d895a0d7fdd0fbe24e65a94039e0deb43

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw6448TVkc5A+:g38Tmr+

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks