General

  • Target

    ceb8f7cc58ac10681b1757fe6f738560

  • Size

    656KB

  • Sample

    231222-r9txeageb6

  • MD5

    ceb8f7cc58ac10681b1757fe6f738560

  • SHA1

    352728961fa0902ff518891cd019675232c57ba3

  • SHA256

    1da0be0aaba776acecca8ca486091916e826dff4009760edaefa520bfbfc1ae5

  • SHA512

    3c3877945c2da143eca9d324f2b22b2ad88c2d50938048dc3a460f9d28dc6e0a4e950567ce2d429e326510b68f0f3d590276031d2402759593a7034902980b79

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64q8TVkc5A+:g32Tmr+

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l39/

Targets

    • Target

      ceb8f7cc58ac10681b1757fe6f738560

    • Size

      656KB

    • MD5

      ceb8f7cc58ac10681b1757fe6f738560

    • SHA1

      352728961fa0902ff518891cd019675232c57ba3

    • SHA256

      1da0be0aaba776acecca8ca486091916e826dff4009760edaefa520bfbfc1ae5

    • SHA512

      3c3877945c2da143eca9d324f2b22b2ad88c2d50938048dc3a460f9d28dc6e0a4e950567ce2d429e326510b68f0f3d590276031d2402759593a7034902980b79

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64q8TVkc5A+:g32Tmr+

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks