General
- Target d2b540b79ab88215e0feea2f14d8fdad
- Size 421KB
- Sample231222-sjp17shfa2
- SHA256 59da2850cf792098c077c2a35e0da9116680a7f839e177a7bf13b883c68fe2af
- MD5 d2b540b79ab88215e0feea2f14d8fdad
- SHA1 b291407a69c015600aae5d7a443abb4b7ed450ca
- SHA512 a180787cefb7c9b9d6f693ece008fec6d30e41288f1e6e9f435c0a7a2b0015a8069fbc0a2f5ada8786f43b144a6ee58289e85c2b5da348a5524d745b7f5f4d4b
- SSDEEP 12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64mL68:q3Z
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
d2b540b79ab88215e0feea2f14d8fdad.ps1
Resource
win7-20231215-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
d2b540b79ab88215e0feea2f14d8fdad.ps1
Resource
win10v2004-20231215-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
oski
C2
-
103.114.107.28/l13/
Targets
-
- Target d2b540b79ab88215e0feea2f14d8fdad
- Size 421KB
- SHA256 59da2850cf792098c077c2a35e0da9116680a7f839e177a7bf13b883c68fe2af
- MD5 d2b540b79ab88215e0feea2f14d8fdad
- SHA1 b291407a69c015600aae5d7a443abb4b7ed450ca
- SHA512 a180787cefb7c9b9d6f693ece008fec6d30e41288f1e6e9f435c0a7a2b0015a8069fbc0a2f5ada8786f43b144a6ee58289e85c2b5da348a5524d745b7f5f4d4b
- SSDEEP 12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64mL68:q3Z
- MD5 SHA1 SHA512 SSDEEP
Score10/10Suspicious use of SetThreadContext