Overview

overview

10

Static

static

1

9c3179a673...c3.ps1

windows7-x64

10

9c3179a673...c3.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c3179a6730b4c6c3a31d82f3aa2f8c3

  • Size

    421KB

  • Sample

    231222-qgf96shbh6

  • MD5

    9c3179a6730b4c6c3a31d82f3aa2f8c3

  • SHA1

    e944baff2c35d4e4fe181192e9f9a0596f34ee2a

  • SHA256

    630bd9245f6c1646f93d771c7971e66ea4b3b07155b8273403c70f1f8f823d95

  • SHA512

    67fab2c78240e14ee1b0aa526a113c26f6d802094a5268c8ae81dc0101286733616131a2373b61c07c9f44016e4486da48e991d31324c493b60d8d3657cc54a4

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64SL68:q3d

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l20/

Targets

    • Target

      9c3179a6730b4c6c3a31d82f3aa2f8c3

    • Size

      421KB

    • MD5

      9c3179a6730b4c6c3a31d82f3aa2f8c3

    • SHA1

      e944baff2c35d4e4fe181192e9f9a0596f34ee2a

    • SHA256

      630bd9245f6c1646f93d771c7971e66ea4b3b07155b8273403c70f1f8f823d95

    • SHA512

      67fab2c78240e14ee1b0aa526a113c26f6d802094a5268c8ae81dc0101286733616131a2373b61c07c9f44016e4486da48e991d31324c493b60d8d3657cc54a4

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64SL68:q3d

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks