Overview

overview

10

Static

static

1

430ca77782...1e.ps1

windows7-x64

10

430ca77782...1e.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    430ca77782734b5bce5c306294a3661e

  • Size

    706KB

  • Sample

    240105-hrxqxafbgk

  • MD5

    430ca77782734b5bce5c306294a3661e

  • SHA1

    cd5992a515d5637abac53e1e7e73a6e7bc9e56fe

  • SHA256

    c4b3861c73357c8d2ee9e1d654caa58e7264a0aef4d6f0a1540137b5239236f3

  • SHA512

    425011eae2368f3b8bf9349c89fde0d6bc81ba6249f92e204b3baa9164195ec284c3cf847f9c0fe22ee4eb76c85d23aed245e9bb41d3440b9155be8756490830

  • SSDEEP

    6144:raJpHs+ApelD0TpSXKFlECflUZdAMr9LXoFNihdhUNK/16dBzMeiuoC6GSOxm02:BOAR402

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.99.1.60/we/2ky/

Targets

    • Target

      430ca77782734b5bce5c306294a3661e

    • Size

      706KB

    • MD5

      430ca77782734b5bce5c306294a3661e

    • SHA1

      cd5992a515d5637abac53e1e7e73a6e7bc9e56fe

    • SHA256

      c4b3861c73357c8d2ee9e1d654caa58e7264a0aef4d6f0a1540137b5239236f3

    • SHA512

      425011eae2368f3b8bf9349c89fde0d6bc81ba6249f92e204b3baa9164195ec284c3cf847f9c0fe22ee4eb76c85d23aed245e9bb41d3440b9155be8756490830

    • SSDEEP

      6144:raJpHs+ApelD0TpSXKFlECflUZdAMr9LXoFNihdhUNK/16dBzMeiuoC6GSOxm02:BOAR402

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks