General

  • Target

    bbb6126304164468a0391e475be41aa0

  • Size

    689KB

  • Sample

    231222-rj8b4sahe7

  • MD5

    bbb6126304164468a0391e475be41aa0

  • SHA1

    a7de5d41291af39b594698220bfaf27d23717428

  • SHA256

    091fb99d751df7e9e867422f401ff7181adc35c6f90ad2c8aafd54e3ec724771

  • SHA512

    d3a7aa913f076053890718ff1251e982f0dbdbfd2c886cdfe0e60de51540dcbbd9c12332c5894b3cce7a04b3b00049a0fb52fbc8dafcc9d2c6276eb5f2794d8c

  • SSDEEP

    6144:2rkT+ZID/jZgGtA3qe8DvZ1ZHRR6UQdKTdRGK0EM9uxxaWfPAh5jKRoZsiJ5FJLd:ukqwjDe8DBjHHWdKTiK4WXAh0uZs

Score
10/10

Malware Config

Extracted

Family

oski

C2

http://bctpump.us

Targets

    • Target

      bbb6126304164468a0391e475be41aa0

    • Size

      689KB

    • MD5

      bbb6126304164468a0391e475be41aa0

    • SHA1

      a7de5d41291af39b594698220bfaf27d23717428

    • SHA256

      091fb99d751df7e9e867422f401ff7181adc35c6f90ad2c8aafd54e3ec724771

    • SHA512

      d3a7aa913f076053890718ff1251e982f0dbdbfd2c886cdfe0e60de51540dcbbd9c12332c5894b3cce7a04b3b00049a0fb52fbc8dafcc9d2c6276eb5f2794d8c

    • SSDEEP

      6144:2rkT+ZID/jZgGtA3qe8DvZ1ZHRR6UQdKTdRGK0EM9uxxaWfPAh5jKRoZsiJ5FJLd:ukqwjDe8DBjHHWdKTiK4WXAh0uZs

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks