General

  • Target

    9db2fe51c5402a405f23f0255f4b76a7

  • Size

    656KB

  • Sample

    231222-qhykvahff7

  • MD5

    9db2fe51c5402a405f23f0255f4b76a7

  • SHA1

    61bd0ed8c362f38a15b917ca04f67cd2a733fdf6

  • SHA256

    102ca2c05ced60f3715f698cc04ecb86f96f062bdc361b1b83dbbf5e1527a1ce

  • SHA512

    0c2b4e85a001ca3794b9b6ef47b86d01bde404bedb61486399f9a4d44135f26fed2d008edfd1378aa66dfd9f2d7ce1982d2cefb2c82d2c7c78569bad57f9c8e2

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64c8TVkc5A+:g3QTmr+

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l2828/

Targets

    • Target

      9db2fe51c5402a405f23f0255f4b76a7

    • Size

      656KB

    • MD5

      9db2fe51c5402a405f23f0255f4b76a7

    • SHA1

      61bd0ed8c362f38a15b917ca04f67cd2a733fdf6

    • SHA256

      102ca2c05ced60f3715f698cc04ecb86f96f062bdc361b1b83dbbf5e1527a1ce

    • SHA512

      0c2b4e85a001ca3794b9b6ef47b86d01bde404bedb61486399f9a4d44135f26fed2d008edfd1378aa66dfd9f2d7ce1982d2cefb2c82d2c7c78569bad57f9c8e2

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64c8TVkc5A+:g3QTmr+

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks