Overview

overview

10

Static

static

1

b3a18b4fa0...77.ps1

windows7-x64

10

b3a18b4fa0...77.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3a18b4fa0d0ea832e9807e265669977

  • Size

    421KB

  • Sample

    240305-drkdcsdh66

  • MD5

    b3a18b4fa0d0ea832e9807e265669977

  • SHA1

    72a2cae6bb16f9ec097fcf09e6ca2691e561cc9e

  • SHA256

    ad3b313a244216f2b1351bae0e8c7e62292c4fe657670a6a604619673236508f

  • SHA512

    31c5eb719f524cd90be5a0e86adaba0e247ddbfba5b45dd1abeda2e4c79fe27eaf8193c63fd1c5c57fa331a55ca84e772b1f9bb5013a1447ec8b1d3298052083

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64sL68:q3n

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l1010/

Targets

    • Target

      b3a18b4fa0d0ea832e9807e265669977

    • Size

      421KB

    • MD5

      b3a18b4fa0d0ea832e9807e265669977

    • SHA1

      72a2cae6bb16f9ec097fcf09e6ca2691e561cc9e

    • SHA256

      ad3b313a244216f2b1351bae0e8c7e62292c4fe657670a6a604619673236508f

    • SHA512

      31c5eb719f524cd90be5a0e86adaba0e247ddbfba5b45dd1abeda2e4c79fe27eaf8193c63fd1c5c57fa331a55ca84e772b1f9bb5013a1447ec8b1d3298052083

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64sL68:q3n

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks