General

  • Target

    4c8015bbc773e46fdbd2ed3785d7bb57

  • Size

    493KB

  • Sample

    240108-1cdnlacbel

  • MD5

    4c8015bbc773e46fdbd2ed3785d7bb57

  • SHA1

    64df0b0921bd0c9eb7189c17fe1a7111c34de176

  • SHA256

    9bb9ebda548a1b5411f95a24e4f2b27705473e91033ae6cb158c19eb2cca5908

  • SHA512

    824b2ee4d088340be9a0f589b50bf2ba08540000c99db380bfe9d1a849eb5f01e16f0e650bbadb45d4d89fce6fb2408a597cc6eeae1147ebda353b0305706a7c

  • SSDEEP

    12288:FMBZjw0RJ9u5ILYDxD3fxYehza/tw64Pj:FMn3u

Score
10/10

Malware Config

Extracted

Family

oski

C2

103.99.1.60/b11k/

Targets

    • Target

      4c8015bbc773e46fdbd2ed3785d7bb57

    • Size

      493KB

    • MD5

      4c8015bbc773e46fdbd2ed3785d7bb57

    • SHA1

      64df0b0921bd0c9eb7189c17fe1a7111c34de176

    • SHA256

      9bb9ebda548a1b5411f95a24e4f2b27705473e91033ae6cb158c19eb2cca5908

    • SHA512

      824b2ee4d088340be9a0f589b50bf2ba08540000c99db380bfe9d1a849eb5f01e16f0e650bbadb45d4d89fce6fb2408a597cc6eeae1147ebda353b0305706a7c

    • SSDEEP

      12288:FMBZjw0RJ9u5ILYDxD3fxYehza/tw64Pj:FMn3u

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks