General

  • Target

    5d7989ec481168e731c3cfb7c5ab847b

  • Size

    503KB

  • Sample

    240115-s7dcbaafaq

  • MD5

    5d7989ec481168e731c3cfb7c5ab847b

  • SHA1

    385839ff1f09f1e095a145dea1f52bbbd5b636cd

  • SHA256

    87b44496287299afa907dcd2cfd440d030cd727590a6f5b97e712e9d6229fa2c

  • SHA512

    315412790dc9556e969e0ed2c95aa674a0c48eb8a529b7158b2c3ada1b8a0bfafdbd1200b82cb2953084f349e1e4f70bdf27bf969ed01c05e5add64e9ecbd1bd

  • SSDEEP

    12288:hpK5q6LiSSGEjVZ266AZjw0RJ9u5ILYDxD3fxYehza/tw64Xo:B3z

Score
10/10

Malware Config

Extracted

Family

oski

C2

103.99.1.60/b15o/

Targets

    • Target

      5d7989ec481168e731c3cfb7c5ab847b

    • Size

      503KB

    • MD5

      5d7989ec481168e731c3cfb7c5ab847b

    • SHA1

      385839ff1f09f1e095a145dea1f52bbbd5b636cd

    • SHA256

      87b44496287299afa907dcd2cfd440d030cd727590a6f5b97e712e9d6229fa2c

    • SHA512

      315412790dc9556e969e0ed2c95aa674a0c48eb8a529b7158b2c3ada1b8a0bfafdbd1200b82cb2953084f349e1e4f70bdf27bf969ed01c05e5add64e9ecbd1bd

    • SSDEEP

      12288:hpK5q6LiSSGEjVZ266AZjw0RJ9u5ILYDxD3fxYehza/tw64Xo:B3z

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks