Overview

overview

10

Static

static

1

c84af18c25...85.ps1

windows7-x64

1

c84af18c25...85.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c84af18c253798e3c6321c2a7048e385

  • Size

    485KB

  • Sample

    231222-r1zfjaeeg2

  • MD5

    c84af18c253798e3c6321c2a7048e385

  • SHA1

    f861c48c8a1087ba3763cba302453c2a187a1faf

  • SHA256

    dbbf8efa02391fa962053f41608e640d7cfcfb10f241feaa7fd3f962e6310342

  • SHA512

    eeff3da876922081b3608f7c43f89ae55a4d32a2c32f74e16abba43ae7de306b707622f2082fba47664b53e6c3ce29ae72b701100c18a05e0de863a597398b5a

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64qigu:q3ju

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l39/

Targets

    • Target

      c84af18c253798e3c6321c2a7048e385

    • Size

      485KB

    • MD5

      c84af18c253798e3c6321c2a7048e385

    • SHA1

      f861c48c8a1087ba3763cba302453c2a187a1faf

    • SHA256

      dbbf8efa02391fa962053f41608e640d7cfcfb10f241feaa7fd3f962e6310342

    • SHA512

      eeff3da876922081b3608f7c43f89ae55a4d32a2c32f74e16abba43ae7de306b707622f2082fba47664b53e6c3ce29ae72b701100c18a05e0de863a597398b5a

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64qigu:q3ju

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks