oski | 086b19f3a5da163a86fac787bdf3ba0c4819865a753dc5f95368a9cbad4d793a | Triage

Sharing

General

Target

2024-07-06_57b65d3a571e34baef597a6aaf5f2594_karagany_mafia
Size

218KB
Sample

240706-ayrjgashmh
MD5

57b65d3a571e34baef597a6aaf5f2594
SHA1

9d52484f4c88e135887907095703dd4399cde2cc
SHA256

086b19f3a5da163a86fac787bdf3ba0c4819865a753dc5f95368a9cbad4d793a
SHA512

8b02bd1dc854da8990f53868f0251b5c0f1404a973c66ba99b743a384e6565ab6abacc2a16e7b1f44b466e408d386c60bc525eeb103647c6fdf2ae91424572c9
SSDEEP

3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIN1Xi6FLPo3cFV7Z:WfUauY68uSWCx+XA7mg2pNg1Ljo3c/d

Score

10^/10

oski infostealer spyware stealer

Malware Config

Targets

- Target
  
  2024-07-06_57b65d3a571e34baef597a6aaf5f2594_karagany_mafia
- Size
  
  218KB
- MD5
  
  57b65d3a571e34baef597a6aaf5f2594
- SHA1
  
  9d52484f4c88e135887907095703dd4399cde2cc
- SHA256
  
  086b19f3a5da163a86fac787bdf3ba0c4819865a753dc5f95368a9cbad4d793a
- SHA512
  
  8b02bd1dc854da8990f53868f0251b5c0f1404a973c66ba99b743a384e6565ab6abacc2a16e7b1f44b466e408d386c60bc525eeb103647c6fdf2ae91424572c9
- SSDEEP
  
  3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIN1Xi6FLPo3cFV7Z:WfUauY68uSWCx+XA7mg2pNg1Ljo3c/d
Score

10^/10

oski infostealer spyware stealer
- Oski
  Oski is an infostealer targeting browser data, crypto wallets.
  infostealer oski
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

oskiinfostealerspywarestealer

behavioral2

oskiinfostealerspywarestealer