General

  • Target

    2a325db7eb63e76ecf7366b046d87bb2

  • Size

    200KB

  • Sample

    231231-f9raqsghe5

  • MD5

    2a325db7eb63e76ecf7366b046d87bb2

  • SHA1

    96c53d421ac1c6a7c54e3e5f554931155b197ac7

  • SHA256

    776ced93bf127c0b0a320dabee353bcebf4bec753c7e5f7f7d5f603d3ee1189c

  • SHA512

    75fb3071b3e4f4fb314b9bf12dacf5cb8680336ca34f1a5b31778478d102166e3e7aaad68521c7d8ee36ea4ffcef2ee41bd38e3d8b52a6d83410e549c9ab9091

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIT1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pN61Ljo3c

Malware Config

Extracted

Family

oski

C2

paulahensingor.com

Targets

    • Target

      2a325db7eb63e76ecf7366b046d87bb2

    • Size

      200KB

    • MD5

      2a325db7eb63e76ecf7366b046d87bb2

    • SHA1

      96c53d421ac1c6a7c54e3e5f554931155b197ac7

    • SHA256

      776ced93bf127c0b0a320dabee353bcebf4bec753c7e5f7f7d5f603d3ee1189c

    • SHA512

      75fb3071b3e4f4fb314b9bf12dacf5cb8680336ca34f1a5b31778478d102166e3e7aaad68521c7d8ee36ea4ffcef2ee41bd38e3d8b52a6d83410e549c9ab9091

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIT1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pN61Ljo3c

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks