General

  • Target

    345e98e236be7ff4c4943c2fe64d4a5d

  • Size

    200KB

  • Sample

    231231-nlynxaeear

  • MD5

    345e98e236be7ff4c4943c2fe64d4a5d

  • SHA1

    62d6c63921c4d8346f0e4d9ebead6a89799fc62d

  • SHA256

    69f41c2c444cd2147188d547c5edd6a4a8e2f238df52e1709dc7bb1066232ecc

  • SHA512

    77cf59a04f3920d9d79dc7912a32d56f630753d8fac4c77efeb8f1b42ba914ba9e6980e11bf1b393760cd57e59e9cd2676ddb6db9fda6fe6c9d111b9adb0d68f

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIx1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNQ1Ljo3c

Malware Config

Extracted

Family

oski

C2

glancehcs.com

Targets

    • Target

      345e98e236be7ff4c4943c2fe64d4a5d

    • Size

      200KB

    • MD5

      345e98e236be7ff4c4943c2fe64d4a5d

    • SHA1

      62d6c63921c4d8346f0e4d9ebead6a89799fc62d

    • SHA256

      69f41c2c444cd2147188d547c5edd6a4a8e2f238df52e1709dc7bb1066232ecc

    • SHA512

      77cf59a04f3920d9d79dc7912a32d56f630753d8fac4c77efeb8f1b42ba914ba9e6980e11bf1b393760cd57e59e9cd2676ddb6db9fda6fe6c9d111b9adb0d68f

    • SSDEEP

      3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIx1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNQ1Ljo3c

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks