oski | 6b5481e8e3fda7186ac66ed4abec432e1dbae2c3c08aeb9da6d7e436238c8a4b | Triage

Sharing

General

Target

2024-01-11_7345bbdbe9233d4609f39e4c6ebdfb2b_karagany_mafia
Size

202KB
Sample

240112-gqrb3ahhd6
MD5

7345bbdbe9233d4609f39e4c6ebdfb2b
SHA1

6c2a4553827dd8c0a57eb7da7710560b1a923a3f
SHA256

6b5481e8e3fda7186ac66ed4abec432e1dbae2c3c08aeb9da6d7e436238c8a4b
SHA512

dae2bcb52adc8d04a43a2f70cde5a1160fee98568c68cdb27ba25441d7360ddc78dd8a22c72e7779d8ba9497f460cafc56ba72a4f22ef4d054d314498257010c
SSDEEP

3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIv1Xi6FLPo3cx:WfUauY68uSWCx+XA7mg2pNC1Ljo3cx

Score

10^/10

oski infostealer spyware stealer

Malware Config

Targets

- Target
  
  2024-01-11_7345bbdbe9233d4609f39e4c6ebdfb2b_karagany_mafia
- Size
  
  202KB
- MD5
  
  7345bbdbe9233d4609f39e4c6ebdfb2b
- SHA1
  
  6c2a4553827dd8c0a57eb7da7710560b1a923a3f
- SHA256
  
  6b5481e8e3fda7186ac66ed4abec432e1dbae2c3c08aeb9da6d7e436238c8a4b
- SHA512
  
  dae2bcb52adc8d04a43a2f70cde5a1160fee98568c68cdb27ba25441d7360ddc78dd8a22c72e7779d8ba9497f460cafc56ba72a4f22ef4d054d314498257010c
- SSDEEP
  
  3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIv1Xi6FLPo3cx:WfUauY68uSWCx+XA7mg2pNC1Ljo3cx
Score

10^/10

oski infostealer spyware stealer
- Oski
  Oski is an infostealer targeting browser data, crypto wallets.
  infostealer oski
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

oskiinfostealerspywarestealer

behavioral2