General

  • Target

    218629c4a1eab5657a91cf9ea1076ce2_JaffaCakes118

  • Size

    362KB

  • Sample

    240728-y15qwascqq

  • MD5

    218629c4a1eab5657a91cf9ea1076ce2

  • SHA1

    960eeacd041dea710abf0ea985ce43edac10e0ca

  • SHA256

    e636e864524817c9421705c33e3606c5d8b46ece43aaafe10cbb8e66bfd84558

  • SHA512

    48995aa257f5da090c98c8d5d345304b03fc4ffa6298947243b1b42934fee82398953a1da7c6823705f3e2f36b7c39abc8eeff93b2a751bbc286455f58f534d8

  • SSDEEP

    6144:9qm4F/+rqgvDkS1ScNX5tn9LSpEQ4sxBy2V1kAqnnYGZLfmfRPyAfDybP2FFFF4q:IeqgvDkIDR5tn9LoHLy2VN7cjmfRPyA1

Malware Config

Extracted

Family

oski

C2

45.8.228.100

Targets

    • Target

      218629c4a1eab5657a91cf9ea1076ce2_JaffaCakes118

    • Size

      362KB

    • MD5

      218629c4a1eab5657a91cf9ea1076ce2

    • SHA1

      960eeacd041dea710abf0ea985ce43edac10e0ca

    • SHA256

      e636e864524817c9421705c33e3606c5d8b46ece43aaafe10cbb8e66bfd84558

    • SHA512

      48995aa257f5da090c98c8d5d345304b03fc4ffa6298947243b1b42934fee82398953a1da7c6823705f3e2f36b7c39abc8eeff93b2a751bbc286455f58f534d8

    • SSDEEP

      6144:9qm4F/+rqgvDkS1ScNX5tn9LSpEQ4sxBy2V1kAqnnYGZLfmfRPyAfDybP2FFFF4q:IeqgvDkIDR5tn9LoHLy2VN7cjmfRPyA1

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks