General

  • Target

    dc7cce7fed750c48705f46022f2f9079

  • Size

    421KB

  • Sample

    240321-ynvp5sad7z

  • MD5

    dc7cce7fed750c48705f46022f2f9079

  • SHA1

    8dd2028110b31271ae6295b378e9ba435ff124ed

  • SHA256

    9472ff0cd262c6be42e1dd53b1553db0e46022c3133dbeacd3d004d6bfc59bdc

  • SHA512

    db47b205be5ee7d15ddd9765eaed5e1aba8558438ef52bbb4a4324a2428cb5f4a2094fb131f821bead518b791bf0d6d4f5bf8b3112cdc46b695d8851d3e151d8

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64PL68:q3Y

Score
10/10

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l34/

Targets

    • Target

      dc7cce7fed750c48705f46022f2f9079

    • Size

      421KB

    • MD5

      dc7cce7fed750c48705f46022f2f9079

    • SHA1

      8dd2028110b31271ae6295b378e9ba435ff124ed

    • SHA256

      9472ff0cd262c6be42e1dd53b1553db0e46022c3133dbeacd3d004d6bfc59bdc

    • SHA512

      db47b205be5ee7d15ddd9765eaed5e1aba8558438ef52bbb4a4324a2428cb5f4a2094fb131f821bead518b791bf0d6d4f5bf8b3112cdc46b695d8851d3e151d8

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64PL68:q3Y

    Score
    10/10
    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks