General

  • Target

    f1a8247a688ebcb34d728f27ff8489dd

  • Size

    421KB

  • Sample

    231222-tz97ragddn

  • MD5

    f1a8247a688ebcb34d728f27ff8489dd

  • SHA1

    33857481b9c0807642983896744082620efc0de7

  • SHA256

    c74dd60489c92b69bd23792a9a2fc5bd963de6781993a66e9b519d6317c93df2

  • SHA512

    35aee40dab7f1ec7ef5ba79feb70886518f899c8a5c2662e6e896e9c45099acf2593b9a14595bdac2132eb6d4be840b8a72176a138fe8766a555a1db9266ed0c

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64bL68:q3c

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l38/

Targets

    • Target

      f1a8247a688ebcb34d728f27ff8489dd

    • Size

      421KB

    • MD5

      f1a8247a688ebcb34d728f27ff8489dd

    • SHA1

      33857481b9c0807642983896744082620efc0de7

    • SHA256

      c74dd60489c92b69bd23792a9a2fc5bd963de6781993a66e9b519d6317c93df2

    • SHA512

      35aee40dab7f1ec7ef5ba79feb70886518f899c8a5c2662e6e896e9c45099acf2593b9a14595bdac2132eb6d4be840b8a72176a138fe8766a555a1db9266ed0c

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64bL68:q3c

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks