Overview

overview

10

Static

static

1

2768710190...22.ps1

windows7-x64

1

2768710190...22.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2768710190533867f46996fddc060622

  • Size

    485KB

  • Sample

    231231-encpsafdcj

  • MD5

    2768710190533867f46996fddc060622

  • SHA1

    2d7e320e6e89e349aa490f5514fd622a0440ed3e

  • SHA256

    9eb716d43c7e136fceac9078a59349c604029821a7f9b62f180ac19a780990fa

  • SHA512

    577999277080291215d7a2801f4b1dc909f5d101d5e577a3c473fdc40a9ad8946282959a5be3fa0487efc822172f9fe3d3ed87cc2f06261980890f5818e1fc05

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64sigu:q3Ju

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l2323/

Targets

    • Target

      2768710190533867f46996fddc060622

    • Size

      485KB

    • MD5

      2768710190533867f46996fddc060622

    • SHA1

      2d7e320e6e89e349aa490f5514fd622a0440ed3e

    • SHA256

      9eb716d43c7e136fceac9078a59349c604029821a7f9b62f180ac19a780990fa

    • SHA512

      577999277080291215d7a2801f4b1dc909f5d101d5e577a3c473fdc40a9ad8946282959a5be3fa0487efc822172f9fe3d3ed87cc2f06261980890f5818e1fc05

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64sigu:q3Ju

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks