Overview

overview

10

Static

static

1

d9fa5b18b3...c9.ps1

windows7-x64

10

d9fa5b18b3...c9.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9fa5b18b345033d9b02b1de41ab03c9

  • Size

    421KB

  • Sample

    231222-sx4rhsbga9

  • MD5

    d9fa5b18b345033d9b02b1de41ab03c9

  • SHA1

    61087f756cf0392af40bb51b71f9581a40269d1c

  • SHA256

    f0eed88ca8a09b3db7ec725d586945de6e47afeec6cb2f0b0e78a5c4396e8cad

  • SHA512

    a489df8590d7eae0b4393c98974f2c30c5d348923e15a7ac48bea57f4cbc2f3079118195d61f6bd797e91d516f28305f97bfbef078217f154e534ab6ee0fd0e3

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64rL68:q3k

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l29/

Targets

    • Target

      d9fa5b18b345033d9b02b1de41ab03c9

    • Size

      421KB

    • MD5

      d9fa5b18b345033d9b02b1de41ab03c9

    • SHA1

      61087f756cf0392af40bb51b71f9581a40269d1c

    • SHA256

      f0eed88ca8a09b3db7ec725d586945de6e47afeec6cb2f0b0e78a5c4396e8cad

    • SHA512

      a489df8590d7eae0b4393c98974f2c30c5d348923e15a7ac48bea57f4cbc2f3079118195d61f6bd797e91d516f28305f97bfbef078217f154e534ab6ee0fd0e3

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64rL68:q3k

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks