Overview

overview

10

Static

static

1

d2b540b79a...ad.ps1

windows7-x64

10

d2b540b79a...ad.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2b540b79ab88215e0feea2f14d8fdad

  • Size

    421KB

  • Sample

    231222-sjp17shfa2

  • MD5

    d2b540b79ab88215e0feea2f14d8fdad

  • SHA1

    b291407a69c015600aae5d7a443abb4b7ed450ca

  • SHA256

    59da2850cf792098c077c2a35e0da9116680a7f839e177a7bf13b883c68fe2af

  • SHA512

    a180787cefb7c9b9d6f693ece008fec6d30e41288f1e6e9f435c0a7a2b0015a8069fbc0a2f5ada8786f43b144a6ee58289e85c2b5da348a5524d745b7f5f4d4b

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64mL68:q3Z

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l13/

Targets

    • Target

      d2b540b79ab88215e0feea2f14d8fdad

    • Size

      421KB

    • MD5

      d2b540b79ab88215e0feea2f14d8fdad

    • SHA1

      b291407a69c015600aae5d7a443abb4b7ed450ca

    • SHA256

      59da2850cf792098c077c2a35e0da9116680a7f839e177a7bf13b883c68fe2af

    • SHA512

      a180787cefb7c9b9d6f693ece008fec6d30e41288f1e6e9f435c0a7a2b0015a8069fbc0a2f5ada8786f43b144a6ee58289e85c2b5da348a5524d745b7f5f4d4b

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64mL68:q3Z

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks