General

  • Target

    5846831cfd75a1d686963ae3c628e00e

  • Size

    1.2MB

  • Sample

    240113-hrycfadhhk

  • MD5

    5846831cfd75a1d686963ae3c628e00e

  • SHA1

    d9782b477828369ce17e2ee95b51ecde7a55452f

  • SHA256

    a27d9f14392c00a3f786949ad7f9317c835dd564d2709b20f1ff2ea68fe46390

  • SHA512

    e437f5f33f5e20683ebd84898494618241c1489b94e445e9d69d330b93649641caf0b6997d160060acbc01a28776a6ac4a4b33b28c70278860fdc73d821f8743

  • SSDEEP

    24576:Eu6Jx3O0c+JY5UZ+XC0kGso/WaplzLTSjTAWY+:+I0c++OCvkGsUWapsY+

Malware Config

Targets

    • Target

      5846831cfd75a1d686963ae3c628e00e

    • Size

      1.2MB

    • MD5

      5846831cfd75a1d686963ae3c628e00e

    • SHA1

      d9782b477828369ce17e2ee95b51ecde7a55452f

    • SHA256

      a27d9f14392c00a3f786949ad7f9317c835dd564d2709b20f1ff2ea68fe46390

    • SHA512

      e437f5f33f5e20683ebd84898494618241c1489b94e445e9d69d330b93649641caf0b6997d160060acbc01a28776a6ac4a4b33b28c70278860fdc73d821f8743

    • SSDEEP

      24576:Eu6Jx3O0c+JY5UZ+XC0kGso/WaplzLTSjTAWY+:+I0c++OCvkGsUWapsY+

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks