Overview

overview

10

Static

static

1

e5351dc8fb...18.ps1

windows7-x64

10

e5351dc8fb...18.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5351dc8fbec2f874e623c30e719c48b_JaffaCakes118

  • Size

    421KB

  • Sample

    240407-sftvzsfd65

  • MD5

    e5351dc8fbec2f874e623c30e719c48b

  • SHA1

    af756d841b0e9bc3accc58561f97111351dc4719

  • SHA256

    5ef0850150c577b7184b16ca066af5322d280d6e4208b8cb2d8059c8fdcd1da2

  • SHA512

    204dd0f88dd1085a616fc611e3b4e49c7d974e1c70eb110c19b040100faf1d8ba699ec3735f7b90cf664e980907878d3ee7e45ce689557ba85d677d1ed5c6c76

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64sL68:q3n

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l2323/

Targets

    • Target

      e5351dc8fbec2f874e623c30e719c48b_JaffaCakes118

    • Size

      421KB

    • MD5

      e5351dc8fbec2f874e623c30e719c48b

    • SHA1

      af756d841b0e9bc3accc58561f97111351dc4719

    • SHA256

      5ef0850150c577b7184b16ca066af5322d280d6e4208b8cb2d8059c8fdcd1da2

    • SHA512

      204dd0f88dd1085a616fc611e3b4e49c7d974e1c70eb110c19b040100faf1d8ba699ec3735f7b90cf664e980907878d3ee7e45ce689557ba85d677d1ed5c6c76

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64sL68:q3n

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks