General

  • Target

    0f736a596f44dbd4c2fb77e28508bed0b76e43d0861ab37c9e3fa4cfadfe580e.exe

  • Size

    242KB

  • Sample

    240226-hs54nsfe98

  • MD5

    e8ecc8d6e704e3ac27fab6247c59a879

  • SHA1

    c1ff6cfd573dec0d656a14df53c0ca3e8a10235c

  • SHA256

    0f736a596f44dbd4c2fb77e28508bed0b76e43d0861ab37c9e3fa4cfadfe580e

  • SHA512

    ab14e3eecea6dfa6004ceb5c08e8d0f7425ea72446a351992f887e350b194d0f92e4fdf7e25c4c36ad273b8e357e6f2c412a38a13f58cc28fbc7f0c1f3d71192

  • SSDEEP

    6144:WfUauY68uSWCx+XA7mg2pND1Ljo3crEHc39:WwY68u1Cx+wm/pvsh

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l27/

Targets

    • Target

      0f736a596f44dbd4c2fb77e28508bed0b76e43d0861ab37c9e3fa4cfadfe580e.exe

    • Size

      242KB

    • MD5

      e8ecc8d6e704e3ac27fab6247c59a879

    • SHA1

      c1ff6cfd573dec0d656a14df53c0ca3e8a10235c

    • SHA256

      0f736a596f44dbd4c2fb77e28508bed0b76e43d0861ab37c9e3fa4cfadfe580e

    • SHA512

      ab14e3eecea6dfa6004ceb5c08e8d0f7425ea72446a351992f887e350b194d0f92e4fdf7e25c4c36ad273b8e357e6f2c412a38a13f58cc28fbc7f0c1f3d71192

    • SSDEEP

      6144:WfUauY68uSWCx+XA7mg2pND1Ljo3crEHc39:WwY68u1Cx+wm/pvsh

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks