General

  • Target

    2a000e68693fc94e1c93d7649712eb2f

  • Size

    200KB

  • Sample

    231231-f5xlysfge3

  • MD5

    2a000e68693fc94e1c93d7649712eb2f

  • SHA1

    e5a8846d7161c3464987acb8c6ae610cafef4da1

  • SHA256

    e8fd915f6c176308283f7567c4b2cbdbdcf617328492c9d09fcfd6364a6ddfba

  • SHA512

    2438330cb252cf56546ec41e612db023d79ac338ead188d34020d54a01fe73b2ae83ad67d3c724bc83eab74830cd58d4c21c7967b355a89f753a189022d4122e

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIU1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNB1Ljo3c

Malware Config

Extracted

Family

oski

C2

ck7.mooo.com

Targets

    • Target

      2a000e68693fc94e1c93d7649712eb2f

    • Size

      200KB

    • MD5

      2a000e68693fc94e1c93d7649712eb2f

    • SHA1

      e5a8846d7161c3464987acb8c6ae610cafef4da1

    • SHA256

      e8fd915f6c176308283f7567c4b2cbdbdcf617328492c9d09fcfd6364a6ddfba

    • SHA512

      2438330cb252cf56546ec41e612db023d79ac338ead188d34020d54a01fe73b2ae83ad67d3c724bc83eab74830cd58d4c21c7967b355a89f753a189022d4122e

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIU1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNB1Ljo3c

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks