Overview

overview

10

Static

static

1

530792b4cf...65.ps1

windows7-x64

10

530792b4cf...65.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    530792b4cfa0029b904ae5130fe1d265

  • Size

    421KB

  • Sample

    240111-kc6flsdcb2

  • MD5

    530792b4cfa0029b904ae5130fe1d265

  • SHA1

    37a8e553cf5c1d21b8894ed520293ad1e35dadfb

  • SHA256

    341efe957c47c866377854003f2bc59907ea2cebb98728121cc68f3b94e2c835

  • SHA512

    0f7c53e9636a49de7c7dcdfe18af627e91e0d7579cb0c748f858e21bf74c31a7eaf75e2cf73770793ce5df8952977b0b81293e0ff80ede5e8a8247f1833c89f7

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64gL68:q3f

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l15/

Targets

    • Target

      530792b4cfa0029b904ae5130fe1d265

    • Size

      421KB

    • MD5

      530792b4cfa0029b904ae5130fe1d265

    • SHA1

      37a8e553cf5c1d21b8894ed520293ad1e35dadfb

    • SHA256

      341efe957c47c866377854003f2bc59907ea2cebb98728121cc68f3b94e2c835

    • SHA512

      0f7c53e9636a49de7c7dcdfe18af627e91e0d7579cb0c748f858e21bf74c31a7eaf75e2cf73770793ce5df8952977b0b81293e0ff80ede5e8a8247f1833c89f7

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64gL68:q3f

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks