General

  • Target

    de3817047cd8f9bd0e975901574bf1ce

  • Size

    656KB

  • Sample

    231222-s5tlhschh5

  • MD5

    de3817047cd8f9bd0e975901574bf1ce

  • SHA1

    48cdab28075451ee7f9b79bf73fdc1a02b040299

  • SHA256

    1ee7056c422e920c492c6569b69ae100c2dfab5e555ba25303718c9c2d44b015

  • SHA512

    3bede65e715939402b393a856fda7c0d28ae53de9cbf4c2b3ae62332514a01e586a3043ee52ddeaaf4e2adab912ca0e1d8d4d06865f607dc9ccb7a6ec5412075

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64g8TVkc5A+:g34Tmr+

Score
10/10

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l15/

Targets

    • Target

      de3817047cd8f9bd0e975901574bf1ce

    • Size

      656KB

    • MD5

      de3817047cd8f9bd0e975901574bf1ce

    • SHA1

      48cdab28075451ee7f9b79bf73fdc1a02b040299

    • SHA256

      1ee7056c422e920c492c6569b69ae100c2dfab5e555ba25303718c9c2d44b015

    • SHA512

      3bede65e715939402b393a856fda7c0d28ae53de9cbf4c2b3ae62332514a01e586a3043ee52ddeaaf4e2adab912ca0e1d8d4d06865f607dc9ccb7a6ec5412075

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64g8TVkc5A+:g34Tmr+

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks