Overview

overview

10

Static

static

1

8ad68f5c7d...8f.ps1

windows7-x64

1

8ad68f5c7d...8f.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ad68f5c7dd4d299af03f3a53d3eea8f

  • Size

    485KB

  • Sample

    240202-3rx2wsedfk

  • MD5

    8ad68f5c7dd4d299af03f3a53d3eea8f

  • SHA1

    16413b33f91a5ac23b9afdce7b639aa5749b2a06

  • SHA256

    ea0157bc1e7b2178b75854a5fa5f139e4b94da24fdfb6710b69bc0318c25a379

  • SHA512

    774e43244601d378ae81cb332ab464b4ff19bb4d4441910eab59a5b83dde15fa27712a339ac7e7517e9345fab5948188c5b1071ef46ce2bd91313aee6f9c2297

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64Migu:q3Fu

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l11/

Targets

    • Target

      8ad68f5c7dd4d299af03f3a53d3eea8f

    • Size

      485KB

    • MD5

      8ad68f5c7dd4d299af03f3a53d3eea8f

    • SHA1

      16413b33f91a5ac23b9afdce7b639aa5749b2a06

    • SHA256

      ea0157bc1e7b2178b75854a5fa5f139e4b94da24fdfb6710b69bc0318c25a379

    • SHA512

      774e43244601d378ae81cb332ab464b4ff19bb4d4441910eab59a5b83dde15fa27712a339ac7e7517e9345fab5948188c5b1071ef46ce2bd91313aee6f9c2297

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64Migu:q3Fu

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks