oski

General

Target
7f05dc92a62ddd277baaeb55ebcfa407
Size 881KB
Sample240129-ga56aacfer
SHA256 06c8a1e6544aede327bad32a5732d5bcfff143da73da01d34938efbe917e3289
MD5 7f05dc92a62ddd277baaeb55ebcfa407
SHA1 23c8c1a1a8d16180980f4b38a47832738f947141
SHA512 3cf46fbbf2e197b15fff65b3250f05add05537e534371ee50c8f0fe6524d4d32717d25ec79c60b8ebd1ed34b99d36522202834ac927fe3e1be5abb7c298768ef
SSDEEP 12288:oplvxon3qGaNHEyC9/oR9gy5ZHK7z1S6TNCTm9H1tVwH9gd0pod3zBts7Vl+YJtm:dPp9AR95SbTIg1Bd4od0+YzR0xz6KV
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

oski

C2

kckark.xyz

Targets

- Target
  7f05dc92a62ddd277baaeb55ebcfa407
- Size 881KB
- SHA256 06c8a1e6544aede327bad32a5732d5bcfff143da73da01d34938efbe917e3289
- MD5 7f05dc92a62ddd277baaeb55ebcfa407
- SHA1 23c8c1a1a8d16180980f4b38a47832738f947141
- SHA512 3cf46fbbf2e197b15fff65b3250f05add05537e534371ee50c8f0fe6524d4d32717d25ec79c60b8ebd1ed34b99d36522202834ac927fe3e1be5abb7c298768ef
- SSDEEP 12288:oplvxon3qGaNHEyC9/oR9gy5ZHK7z1S6TNCTm9H1tVwH9gd0pod3zBts7Vl+YJtm:dPp9AR95SbTIg1Bd4od0+YzR0xz6KV
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

oski infostealer spyware stealer
- Oski
  Oski is an infostealer targeting browser data, crypto wallets.
  infostealer oski
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1

T1552

Credentials In Files

1

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Reads user/profile data of web browsers

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2