General

  • Target

    cc4bdd8e7f88763262c4634434b1dd77

  • Size

    1.1MB

  • Sample

    231222-r67n4adcfp

  • MD5

    cc4bdd8e7f88763262c4634434b1dd77

  • SHA1

    f79dafab3b401354ee39c1e212cbd2f7b578971a

  • SHA256

    a2ae38d4b467bc8ab66ae53b28bd01365e9240b83f7f5e952d42c2aee0eae3ca

  • SHA512

    dbf2a96ad199051dd7466c164024dca35b08b09d6a5384a1f5aea0ca6f3474f1e1dd9a8d329676bfd4e4271494c2de0a276c59e1f677ce4696c34292bc2e8b36

  • SSDEEP

    24576:4MXD6D+Xq6Hy1Tl99QQdt7eq7XrN7xoeizky+Vr8x:zXD6D+6Z1Tri4r7o9aVox

Malware Config

Extracted

Family

oski

C2

176.113.82.180

Targets

    • Target

      cc4bdd8e7f88763262c4634434b1dd77

    • Size

      1.1MB

    • MD5

      cc4bdd8e7f88763262c4634434b1dd77

    • SHA1

      f79dafab3b401354ee39c1e212cbd2f7b578971a

    • SHA256

      a2ae38d4b467bc8ab66ae53b28bd01365e9240b83f7f5e952d42c2aee0eae3ca

    • SHA512

      dbf2a96ad199051dd7466c164024dca35b08b09d6a5384a1f5aea0ca6f3474f1e1dd9a8d329676bfd4e4271494c2de0a276c59e1f677ce4696c34292bc2e8b36

    • SSDEEP

      24576:4MXD6D+Xq6Hy1Tl99QQdt7eq7XrN7xoeizky+Vr8x:zXD6D+6Z1Tri4r7o9aVox

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks