Overview

overview

10

Static

static

1

23f2e867dd...4e.ps1

windows7-x64

1

23f2e867dd...4e.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23f2e867ddbbe2e6c9e7959bae0df84e

  • Size

    485KB

  • Sample

    231231-ckna1aeec2

  • MD5

    23f2e867ddbbe2e6c9e7959bae0df84e

  • SHA1

    7a9568574654f6207804900ca0bb75c5413c363b

  • SHA256

    b29df81720ce329eaa0f4304025431f95e2160b2d2c88c86ac37a33d030d54f4

  • SHA512

    3eae942ac2b0e40179422058bd47813a1f9b8406dc961978b31c501d25aac743a6e7a4bb5068bb32293497c0ea37ec46aafeb856af1aa59505ad029b840b83bf

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64oigu:q31u

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l5/

Targets

    • Target

      23f2e867ddbbe2e6c9e7959bae0df84e

    • Size

      485KB

    • MD5

      23f2e867ddbbe2e6c9e7959bae0df84e

    • SHA1

      7a9568574654f6207804900ca0bb75c5413c363b

    • SHA256

      b29df81720ce329eaa0f4304025431f95e2160b2d2c88c86ac37a33d030d54f4

    • SHA512

      3eae942ac2b0e40179422058bd47813a1f9b8406dc961978b31c501d25aac743a6e7a4bb5068bb32293497c0ea37ec46aafeb856af1aa59505ad029b840b83bf

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64oigu:q31u

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks