General

  • Target

    d3e88703aaa4fe2bfdb0f663744724cc

  • Size

    680KB

  • Sample

    240318-tch5rada8x

  • MD5

    d3e88703aaa4fe2bfdb0f663744724cc

  • SHA1

    a1cc305fefde48e889325437a33a6572e3899654

  • SHA256

    992ddc778bc3af49b9b7c424071cfe0db67dbcee83994debfee421ef4190d473

  • SHA512

    bdfa11eebd000973b83be71a813ae4ecd6aae00cd1f7e6a738f7fcdb07784fe1386c50185bfda697d9c96f1cdb7dd0f45f02e55a319d6ce302179c04980fd8f7

  • SSDEEP

    6144:VSiQrg69Xxsn7TdiQ2IhXAO0eq2+jTuDZR34M8NAWk2KdOAEQYFlX8s41aaST:IPxsn7Td7XFq2+aZwAL2YOAUl8lRST

Malware Config

Extracted

Family

oski

C2

chikkark.xyz

Targets

    • Target

      d3e88703aaa4fe2bfdb0f663744724cc

    • Size

      680KB

    • MD5

      d3e88703aaa4fe2bfdb0f663744724cc

    • SHA1

      a1cc305fefde48e889325437a33a6572e3899654

    • SHA256

      992ddc778bc3af49b9b7c424071cfe0db67dbcee83994debfee421ef4190d473

    • SHA512

      bdfa11eebd000973b83be71a813ae4ecd6aae00cd1f7e6a738f7fcdb07784fe1386c50185bfda697d9c96f1cdb7dd0f45f02e55a319d6ce302179c04980fd8f7

    • SSDEEP

      6144:VSiQrg69Xxsn7TdiQ2IhXAO0eq2+jTuDZR34M8NAWk2KdOAEQYFlX8s41aaST:IPxsn7Td7XFq2+aZwAL2YOAUl8lRST

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks