General

  • Target

    b43ae45b39a0647231b51c2d438a554e

  • Size

    696KB

  • Sample

    240305-j5xhqsad3t

  • MD5

    b43ae45b39a0647231b51c2d438a554e

  • SHA1

    7f7f55ef05410e17329dd3fb3c26e325f227592a

  • SHA256

    a2013616892886b9fcd2067d2e77436c5233653772f6a6f235a325b1122c34a9

  • SHA512

    d2edfdada863310d3feb6aac7eb72c3cda11dca1da36739f8a5a1e2dde4f131f70da6d7ef5d6d7e6c5c19fdab62d576a95514e3c8dca3ffce11dbe96a2720aa6

  • SSDEEP

    12288:g9bDKZtBLE5x4T7RejE+BAdB1JLsSe/RXz/ZwgQiXG/IPQQ0pvRCph5kz1200CZ:EgLE5uTdejkRe/11wm21

Malware Config

Extracted

Family

oski

C2

zdd.divendesign.in

Targets

    • Target

      b43ae45b39a0647231b51c2d438a554e

    • Size

      696KB

    • MD5

      b43ae45b39a0647231b51c2d438a554e

    • SHA1

      7f7f55ef05410e17329dd3fb3c26e325f227592a

    • SHA256

      a2013616892886b9fcd2067d2e77436c5233653772f6a6f235a325b1122c34a9

    • SHA512

      d2edfdada863310d3feb6aac7eb72c3cda11dca1da36739f8a5a1e2dde4f131f70da6d7ef5d6d7e6c5c19fdab62d576a95514e3c8dca3ffce11dbe96a2720aa6

    • SSDEEP

      12288:g9bDKZtBLE5x4T7RejE+BAdB1JLsSe/RXz/ZwgQiXG/IPQQ0pvRCph5kz1200CZ:EgLE5uTdejkRe/11wm21

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks