Overview

overview

10

Static

static

1

5e70c004a1...7f.ps1

windows7-x64

1

5e70c004a1...7f.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e70c004a15f9c9dd298b95046feee7f

  • Size

    485KB

  • Sample

    240116-ad3e8shcfn

  • MD5

    5e70c004a15f9c9dd298b95046feee7f

  • SHA1

    fc990eadc3d9e92d62c2fb933e40def2c96900dd

  • SHA256

    a216b930fa01417a53852559e8a01e7d61aafb04d85fffedc1e81b20822f162d

  • SHA512

    0eef2f58be50b8d09d9970d43953edbf98f44beaf645e0cacdf84210cf71b3a31546f9c2885a183fd8a9cce682f21c118bac53fb0435dc3a0aeff3fa2ed6c096

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64sigu:q3Zu

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l9/

Targets

    • Target

      5e70c004a15f9c9dd298b95046feee7f

    • Size

      485KB

    • MD5

      5e70c004a15f9c9dd298b95046feee7f

    • SHA1

      fc990eadc3d9e92d62c2fb933e40def2c96900dd

    • SHA256

      a216b930fa01417a53852559e8a01e7d61aafb04d85fffedc1e81b20822f162d

    • SHA512

      0eef2f58be50b8d09d9970d43953edbf98f44beaf645e0cacdf84210cf71b3a31546f9c2885a183fd8a9cce682f21c118bac53fb0435dc3a0aeff3fa2ed6c096

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64sigu:q3Zu

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks