Overview

overview

10

Static

static

1

dabd06a518...83.ps1

windows7-x64

10

dabd06a518...83.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dabd06a518470e0258264304bd457d83

  • Size

    421KB

  • Sample

    240321-fh11vscb37

  • MD5

    dabd06a518470e0258264304bd457d83

  • SHA1

    5ce3283b9d18c2dcc98ed9dcb1e11ded00e01090

  • SHA256

    b45cf106e1fefb392966c49e729d1dbe39599940e2da2ede23b19de99086ad08

  • SHA512

    edc7c5d63b1b4b1b77dab32f4c95bcb499e13cc4f5893c74a1cbd5417ea191836d1772158b6d221290ba2ee1b9a381ec9fbee8d16959cad7f84ce73c8f8b33fd

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64+L68:q3N

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l35/

Targets

    • Target

      dabd06a518470e0258264304bd457d83

    • Size

      421KB

    • MD5

      dabd06a518470e0258264304bd457d83

    • SHA1

      5ce3283b9d18c2dcc98ed9dcb1e11ded00e01090

    • SHA256

      b45cf106e1fefb392966c49e729d1dbe39599940e2da2ede23b19de99086ad08

    • SHA512

      edc7c5d63b1b4b1b77dab32f4c95bcb499e13cc4f5893c74a1cbd5417ea191836d1772158b6d221290ba2ee1b9a381ec9fbee8d16959cad7f84ce73c8f8b33fd

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64+L68:q3N

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks