General

  • Target

    20240919a1fba653486ce82f8413ad14676d3a8emafia

  • Size

    182KB

  • Sample

    240919-12d1natdnp

  • MD5

    a1fba653486ce82f8413ad14676d3a8e

  • SHA1

    260bcf4a29cdac7a15dd0a32b49822bde4c83011

  • SHA256

    ab1980665f6dc02ef0633c7d1726f65b8e17b61df46112029f19dc98f84014af

  • SHA512

    ea318549af1caf88c8789881360a8718256b9752642be31ac89cbffb6cc6406bf9a99779894208e117954b562b4a0754433e760b37bfb98c5a3540037d71c3b9

  • SSDEEP

    3072:Cu32xlnAm9orZc9cHSBKz5B1clewlcUrXt54EnBm0QeWvu:9mTwSBKzL14hvIEA0Qeau

Malware Config

Extracted

Family

oski

C2

ftelegram.fun

Targets

    • Target

      20240919a1fba653486ce82f8413ad14676d3a8emafia

    • Size

      182KB

    • MD5

      a1fba653486ce82f8413ad14676d3a8e

    • SHA1

      260bcf4a29cdac7a15dd0a32b49822bde4c83011

    • SHA256

      ab1980665f6dc02ef0633c7d1726f65b8e17b61df46112029f19dc98f84014af

    • SHA512

      ea318549af1caf88c8789881360a8718256b9752642be31ac89cbffb6cc6406bf9a99779894208e117954b562b4a0754433e760b37bfb98c5a3540037d71c3b9

    • SSDEEP

      3072:Cu32xlnAm9orZc9cHSBKz5B1clewlcUrXt54EnBm0QeWvu:9mTwSBKzL14hvIEA0Qeau

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks