General

  • Target

    8f84a3ca662fe5a89a35c32df3db77d4

  • Size

    656KB

  • Sample

    240204-s1s47afcdq

  • MD5

    8f84a3ca662fe5a89a35c32df3db77d4

  • SHA1

    d677a8e48202eb8e915934f40b3eead7d2b071a8

  • SHA256

    e964f339c6a7e1119c7992a08e4db2cc5cf987d83019142afce62f60285e31b2

  • SHA512

    8f1249a9a5f66b53196a00c3e60f0108452c25b885ee8eaf868d9e97089c49e9fdd7a6a919bc0c2100e851510133125888fdba023ca2b956af981d309de91de1

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64m8TVkc5A+:g3+Tmr+

Score
10/10

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l13/

Targets

    • Target

      8f84a3ca662fe5a89a35c32df3db77d4

    • Size

      656KB

    • MD5

      8f84a3ca662fe5a89a35c32df3db77d4

    • SHA1

      d677a8e48202eb8e915934f40b3eead7d2b071a8

    • SHA256

      e964f339c6a7e1119c7992a08e4db2cc5cf987d83019142afce62f60285e31b2

    • SHA512

      8f1249a9a5f66b53196a00c3e60f0108452c25b885ee8eaf868d9e97089c49e9fdd7a6a919bc0c2100e851510133125888fdba023ca2b956af981d309de91de1

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64m8TVkc5A+:g3+Tmr+

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks