Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
26-02-2024 07:00
General
-
Target
0f736a596f44dbd4c2fb77e28508bed0b76e43d0861ab37c9e3fa4cfadfe580e.exe
-
Size
242KB
-
MD5
e8ecc8d6e704e3ac27fab6247c59a879
-
SHA1
c1ff6cfd573dec0d656a14df53c0ca3e8a10235c
-
SHA256
0f736a596f44dbd4c2fb77e28508bed0b76e43d0861ab37c9e3fa4cfadfe580e
-
SHA512
ab14e3eecea6dfa6004ceb5c08e8d0f7425ea72446a351992f887e350b194d0f92e4fdf7e25c4c36ad273b8e357e6f2c412a38a13f58cc28fbc7f0c1f3d71192
-
SSDEEP
6144:WfUauY68uSWCx+XA7mg2pND1Ljo3crEHc39:WwY68u1Cx+wm/pvsh
Score
10/10
Malware Config
Signatures
-
Oski
Oski is an infostealer targeting browser data, crypto wallets.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0f736a596f44dbd4c2fb77e28508bed0b76e43d0861ab37c9e3fa4cfadfe580e.exe"C:\Users\Admin\AppData\Local\Temp\0f736a596f44dbd4c2fb77e28508bed0b76e43d0861ab37c9e3fa4cfadfe580e.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3668 -s 11642⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3668 -ip 36681⤵