Overview

overview

10

Static

static

1

ef497db08e...18.ps1

windows7-x64

1

ef497db08e...18.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef497db08eb237cbba60985baf68db24_JaffaCakes118

  • Size

    485KB

  • Sample

    240412-gsz2zsbd2w

  • MD5

    ef497db08eb237cbba60985baf68db24

  • SHA1

    05bb3dd0e475d6a88aad4cc6d1b1c83d88df02bf

  • SHA256

    3009ae481472637a3e35d4448ed5c5c24ad823c0caf60ecc99e717757aef8eff

  • SHA512

    8702c2d2a09161d10b49d1ffd36130b6fff1b88062d1e12ec889a3d07d3fb0d4d123e69069ebcfebf8b1623b8003ed1c173db1d1e11e643171df834f88b3dfc4

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64gigu:q3hu

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

103.114.107.28/l15/

Targets

    • Target

      ef497db08eb237cbba60985baf68db24_JaffaCakes118

    • Size

      485KB

    • MD5

      ef497db08eb237cbba60985baf68db24

    • SHA1

      05bb3dd0e475d6a88aad4cc6d1b1c83d88df02bf

    • SHA256

      3009ae481472637a3e35d4448ed5c5c24ad823c0caf60ecc99e717757aef8eff

    • SHA512

      8702c2d2a09161d10b49d1ffd36130b6fff1b88062d1e12ec889a3d07d3fb0d4d123e69069ebcfebf8b1623b8003ed1c173db1d1e11e643171df834f88b3dfc4

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64gigu:q3hu

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks