Overview

overview

10

Static

static

1

fc2f33217e...62.ps1

windows7-x64

1

fc2f33217e...62.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc2f33217e1a3595b6e287abf6f14262

  • Size

    485KB

  • Sample

    231222-vqrvgseaf2

  • MD5

    fc2f33217e1a3595b6e287abf6f14262

  • SHA1

    607f7c499d49dce1d70f84cf7e45368065baf29f

  • SHA256

    63cf348c2e3dc95324a96b8c07162556b539ff8d6dceef1d1b6f0379c42fface

  • SHA512

    4ac861d100e47d5a9d11ce6fa6065ec08f4d115be7d02b0f0a230fe85661b1a845ca545b19576d4fad9756bbe26282e7518f71c1a78fe77f5a5efe3769c592d8

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64migu:q3bu

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l13/

Targets

    • Target

      fc2f33217e1a3595b6e287abf6f14262

    • Size

      485KB

    • MD5

      fc2f33217e1a3595b6e287abf6f14262

    • SHA1

      607f7c499d49dce1d70f84cf7e45368065baf29f

    • SHA256

      63cf348c2e3dc95324a96b8c07162556b539ff8d6dceef1d1b6f0379c42fface

    • SHA512

      4ac861d100e47d5a9d11ce6fa6065ec08f4d115be7d02b0f0a230fe85661b1a845ca545b19576d4fad9756bbe26282e7518f71c1a78fe77f5a5efe3769c592d8

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64migu:q3bu

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks