Overview

overview

10

Static

static

1

cdfbd78961...18.ps1

windows7-x64

1

cdfbd78961...18.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cdfbd789618943e68323a61e3f36c905_JaffaCakes118

  • Size

    363KB

  • Sample

    240405-jt29vaeh61

  • MD5

    cdfbd789618943e68323a61e3f36c905

  • SHA1

    8df62d6b66925f9c091ef285e7db70703922e317

  • SHA256

    9d4388563479b260352b5a5e00b5468315c27febd66b4428407f64126372306f

  • SHA512

    a446c80e832c34a2c1b92af649362cccae1f558ecca8f8229c8b3738ed5c2c63c82cf5d1fde3f355231e3832fc4a9c76b006092e20182354265a9d8dc0583c5f

  • SSDEEP

    1536:EUsNE7WNSVZF13AH5YAQIDDPK44rVL/GglenfNqYoKLE3nWNjwNxRpy1F5J7khmP:N9G

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.125.190.248/i1/

Targets

    • Target

      cdfbd789618943e68323a61e3f36c905_JaffaCakes118

    • Size

      363KB

    • MD5

      cdfbd789618943e68323a61e3f36c905

    • SHA1

      8df62d6b66925f9c091ef285e7db70703922e317

    • SHA256

      9d4388563479b260352b5a5e00b5468315c27febd66b4428407f64126372306f

    • SHA512

      a446c80e832c34a2c1b92af649362cccae1f558ecca8f8229c8b3738ed5c2c63c82cf5d1fde3f355231e3832fc4a9c76b006092e20182354265a9d8dc0583c5f

    • SSDEEP

      1536:EUsNE7WNSVZF13AH5YAQIDDPK44rVL/GglenfNqYoKLE3nWNjwNxRpy1F5J7khmP:N9G

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks