Overview

overview

10

Static

static

1

3d69a438d2...fe.ps1

windows7-x64

1

3d69a438d2...fe.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d69a438d2ad0aad062f2e9506f35dfe

  • Size

    485KB

  • Sample

    240101-vqgdrahac3

  • MD5

    3d69a438d2ad0aad062f2e9506f35dfe

  • SHA1

    1f4b12cff09ecf10cb0f391acb5134afbc8552d7

  • SHA256

    0b776bb3bc48dcdb0e99b045ce4ce4488b307732b903aeb54c85d8c88d565f80

  • SHA512

    de2d95eca57695a9454d62a9d2dc9aa2f4eb3ea60b8f2544a99285bb0e137bd4879c83f921727ab71513cbbc0c207db2ed09e8097256c00b6ed1821b1a6422db

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64digu:q3au

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l27/

Targets

    • Target

      3d69a438d2ad0aad062f2e9506f35dfe

    • Size

      485KB

    • MD5

      3d69a438d2ad0aad062f2e9506f35dfe

    • SHA1

      1f4b12cff09ecf10cb0f391acb5134afbc8552d7

    • SHA256

      0b776bb3bc48dcdb0e99b045ce4ce4488b307732b903aeb54c85d8c88d565f80

    • SHA512

      de2d95eca57695a9454d62a9d2dc9aa2f4eb3ea60b8f2544a99285bb0e137bd4879c83f921727ab71513cbbc0c207db2ed09e8097256c00b6ed1821b1a6422db

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64digu:q3au

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks