Overview

overview

10

Static

static

1

a0d1d10ce1...55.ps1

windows7-x64

10

a0d1d10ce1...55.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0d1d10ce1be5360824104bafd7eb255

  • Size

    421KB

  • Sample

    231222-qmnw7safd2

  • MD5

    a0d1d10ce1be5360824104bafd7eb255

  • SHA1

    a5d7ebda7760537e92279c807163b7835ab789e4

  • SHA256

    35c7adde806daa386ef0e07fcde131bea44ccc9c7e8a03af0a80ed7385cb125f

  • SHA512

    5c49df98788c7b5e2194330b98bdf3bc7d3567c6291f4356c39a3e57668d0d478cc6bf322d37bef5413fd90f80b788a7c1539fcb847d9187e345797c5dbc5c9d

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64qL68:q3B

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l39/

Targets

    • Target

      a0d1d10ce1be5360824104bafd7eb255

    • Size

      421KB

    • MD5

      a0d1d10ce1be5360824104bafd7eb255

    • SHA1

      a5d7ebda7760537e92279c807163b7835ab789e4

    • SHA256

      35c7adde806daa386ef0e07fcde131bea44ccc9c7e8a03af0a80ed7385cb125f

    • SHA512

      5c49df98788c7b5e2194330b98bdf3bc7d3567c6291f4356c39a3e57668d0d478cc6bf322d37bef5413fd90f80b788a7c1539fcb847d9187e345797c5dbc5c9d

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64qL68:q3B

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks