General

  • Target

    ca3bb3fc686f6bb324c449a91bb495fb

  • Size

    421KB

  • Sample

    231222-r438wsfbf9

  • MD5

    ca3bb3fc686f6bb324c449a91bb495fb

  • SHA1

    29440914fe715c5ebdbd9a0dc66318f29ca46b47

  • SHA256

    e170f6e534f68f5afcfe10c3bb456ddd307e7986a34c314c359ee48a8068725e

  • SHA512

    ae57360f9a99944f72f250c1d5d2cdb41c65c0e3ce69db36c336b00cdd1a230f0e5f4bb810daeee875d201812ea89e70c9bdd371b1a647fd97e9711f41110f62

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64tL68:q3O

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l404/

Targets

    • Target

      ca3bb3fc686f6bb324c449a91bb495fb

    • Size

      421KB

    • MD5

      ca3bb3fc686f6bb324c449a91bb495fb

    • SHA1

      29440914fe715c5ebdbd9a0dc66318f29ca46b47

    • SHA256

      e170f6e534f68f5afcfe10c3bb456ddd307e7986a34c314c359ee48a8068725e

    • SHA512

      ae57360f9a99944f72f250c1d5d2cdb41c65c0e3ce69db36c336b00cdd1a230f0e5f4bb810daeee875d201812ea89e70c9bdd371b1a647fd97e9711f41110f62

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64tL68:q3O

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks