General

  • Target

    d89300e103bfd617274ee22294bcc16c

  • Size

    759KB

  • Sample

    240320-mh3b9aee48

  • MD5

    d89300e103bfd617274ee22294bcc16c

  • SHA1

    bdf3d1ee7760dea64c34cd93c4103ad100a9bf9e

  • SHA256

    7d12860910f95752bab43166470d3ac6dd1b8be3599bae2fca48aa1d01d1034a

  • SHA512

    d57539ae0069b70e4af5d904902cdf3c9c0249400ec774cecc4b9b32a594a81b99a2c9a938561ff84af7c48629284235d2625396b5a9d5a889ef019d0fefa892

  • SSDEEP

    6144:7JAPTiU4IvFjEqIZg/0e6WJjHYhBY8NP7FFNG+B3IKKLnGENHp6XhBgR7NCE:KriRIvBEqIZ1kHsNPDN9lLKLNHwRB

Score
10/10

Malware Config

Extracted

Family

oski

C2

http://bctpump.us

Targets

    • Target

      d89300e103bfd617274ee22294bcc16c

    • Size

      759KB

    • MD5

      d89300e103bfd617274ee22294bcc16c

    • SHA1

      bdf3d1ee7760dea64c34cd93c4103ad100a9bf9e

    • SHA256

      7d12860910f95752bab43166470d3ac6dd1b8be3599bae2fca48aa1d01d1034a

    • SHA512

      d57539ae0069b70e4af5d904902cdf3c9c0249400ec774cecc4b9b32a594a81b99a2c9a938561ff84af7c48629284235d2625396b5a9d5a889ef019d0fefa892

    • SSDEEP

      6144:7JAPTiU4IvFjEqIZg/0e6WJjHYhBY8NP7FFNG+B3IKKLnGENHp6XhBgR7NCE:KriRIvBEqIZ1kHsNPDN9lLKLNHwRB

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks