Overview

overview

10

Static

static

1

588973c3e0...ad.ps1

windows7-x64

10

588973c3e0...ad.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    588973c3e0c9775ff44f3ec831624cad

  • Size

    493KB

  • Sample

    240113-k4w19afedp

  • MD5

    588973c3e0c9775ff44f3ec831624cad

  • SHA1

    ac392d1ffaf4eb0c38e946d4dc47e9347278d8cc

  • SHA256

    e543def5c2daeca7cf754090cffd2985dd00a3e03630391d5e0155121a557af6

  • SHA512

    2ada87f87a2988152b96262ac2c2d7338ed6155c1d9b1af11e709b3685f5de4fb025d22d89a0880d7fde4830dabf315d5052da5ebdf97de08e6d22c929a2a391

  • SSDEEP

    12288:FMBZjw0RJ9u5ILYDxD3fxYehza/tw64Xj:FMn3+

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.99.1.60/b15o/

Targets

    • Target

      588973c3e0c9775ff44f3ec831624cad

    • Size

      493KB

    • MD5

      588973c3e0c9775ff44f3ec831624cad

    • SHA1

      ac392d1ffaf4eb0c38e946d4dc47e9347278d8cc

    • SHA256

      e543def5c2daeca7cf754090cffd2985dd00a3e03630391d5e0155121a557af6

    • SHA512

      2ada87f87a2988152b96262ac2c2d7338ed6155c1d9b1af11e709b3685f5de4fb025d22d89a0880d7fde4830dabf315d5052da5ebdf97de08e6d22c929a2a391

    • SSDEEP

      12288:FMBZjw0RJ9u5ILYDxD3fxYehza/tw64Xj:FMn3+

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks