Overview

overview

10

Static

static

1

e3b2de137b...18.ps1

windows7-x64

1

e3b2de137b...18.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3b2de137b33c9a7b451ac31a2d8ca52_JaffaCakes118

  • Size

    656KB

  • Sample

    240407-baxw1sgc3y

  • MD5

    e3b2de137b33c9a7b451ac31a2d8ca52

  • SHA1

    3ff67e58cc9bcc834dbbfbe6300541df6eb89c02

  • SHA256

    6688b11e528cbf670e6b83df29090845d8b3a135416797e665bcbd7202abd48b

  • SHA512

    7cf47cbffdb66526d65fa7489994aa2d2d44287c0b200b9eae25ee27489ef950a50b4189de0a311b2d5ee82468c6b9c775eb56b50f442fe5ad70b11b590b8584

  • SSDEEP

    12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64B8TVkc5A+:g3jTmr+

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l32/

Targets

    • Target

      e3b2de137b33c9a7b451ac31a2d8ca52_JaffaCakes118

    • Size

      656KB

    • MD5

      e3b2de137b33c9a7b451ac31a2d8ca52

    • SHA1

      3ff67e58cc9bcc834dbbfbe6300541df6eb89c02

    • SHA256

      6688b11e528cbf670e6b83df29090845d8b3a135416797e665bcbd7202abd48b

    • SHA512

      7cf47cbffdb66526d65fa7489994aa2d2d44287c0b200b9eae25ee27489ef950a50b4189de0a311b2d5ee82468c6b9c775eb56b50f442fe5ad70b11b590b8584

    • SSDEEP

      12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64B8TVkc5A+:g3jTmr+

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks