General

  • Target

    daf543db36758a68acc7aa0dfe15bed3

  • Size

    421KB

  • Sample

    231222-s17btahffl

  • MD5

    daf543db36758a68acc7aa0dfe15bed3

  • SHA1

    acc96c5db5f0eba481ff05c94744e0c4043ce46a

  • SHA256

    f20d954062ff2bc2f6d8fb07d6b8393f50ad49510811b386cef7419c295c2a84

  • SHA512

    ec93789b5d2693a286b22bc1bd58f6f5c25843bd56723deee9d54a8877902c404a84b33b065f1dc4fa3dbf17b8001a843ca80c87d4af0eba4cd333547905cd56

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64aL68:q3t

Score
10/10

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l17/

Targets

    • Target

      daf543db36758a68acc7aa0dfe15bed3

    • Size

      421KB

    • MD5

      daf543db36758a68acc7aa0dfe15bed3

    • SHA1

      acc96c5db5f0eba481ff05c94744e0c4043ce46a

    • SHA256

      f20d954062ff2bc2f6d8fb07d6b8393f50ad49510811b386cef7419c295c2a84

    • SHA512

      ec93789b5d2693a286b22bc1bd58f6f5c25843bd56723deee9d54a8877902c404a84b33b065f1dc4fa3dbf17b8001a843ca80c87d4af0eba4cd333547905cd56

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64aL68:q3t

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks