Analysis
-
max time kernel
82s -
max time network
85s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
28-03-2024 15:17
General
-
Target
fb9b940ffe27e744eeeaef3d1a2805ce205668274bdabc3a30863b016ad47f27.exe
-
Size
216KB
-
MD5
4bad60b9f9b806983c07ab47306ce6b0
-
SHA1
e4e1ac94ceaff5afb2d271e61ce28029fa01eae0
-
SHA256
fb9b940ffe27e744eeeaef3d1a2805ce205668274bdabc3a30863b016ad47f27
-
SHA512
1af5f7b7581dca68f7d4ce82689849dac08e073b689bec084300ba17beef6856353c1a8a4cff6cf453d2b18ca95c6fd82dd20f4f81ff2d527b73a7bd9d655fff
-
SSDEEP
3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIH1Xi6FLPo3clJ2v:WfUauY68uSWCx+XA7mg2pNS1Ljo3cf2
Score
10/10
Malware Config
Signatures
-
Oski
Oski is an infostealer targeting browser data, crypto wallets.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb9b940ffe27e744eeeaef3d1a2805ce205668274bdabc3a30863b016ad47f27.exe"C:\Users\Admin\AppData\Local\Temp\fb9b940ffe27e744eeeaef3d1a2805ce205668274bdabc3a30863b016ad47f27.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5004 -s 13642⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 5004 -ip 50041⤵