Overview

overview

10

Static

static

10

2024-09-19...ia.exe

windows7-x64

10

2024-09-19...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-19_a1fba653486ce82f8413ad14676d3a8e_mafia

  • Size

    182KB

  • Sample

    240919-q628ya1gpa

  • MD5

    a1fba653486ce82f8413ad14676d3a8e

  • SHA1

    260bcf4a29cdac7a15dd0a32b49822bde4c83011

  • SHA256

    ab1980665f6dc02ef0633c7d1726f65b8e17b61df46112029f19dc98f84014af

  • SHA512

    ea318549af1caf88c8789881360a8718256b9752642be31ac89cbffb6cc6406bf9a99779894208e117954b562b4a0754433e760b37bfb98c5a3540037d71c3b9

  • SSDEEP

    3072:Cu32xlnAm9orZc9cHSBKz5B1clewlcUrXt54EnBm0QeWvu:9mTwSBKzL14hvIEA0Qeau

Score
10/10
oskicredential_accessdiscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      2024-09-19_a1fba653486ce82f8413ad14676d3a8e_mafia

    • Size

      182KB

    • MD5

      a1fba653486ce82f8413ad14676d3a8e

    • SHA1

      260bcf4a29cdac7a15dd0a32b49822bde4c83011

    • SHA256

      ab1980665f6dc02ef0633c7d1726f65b8e17b61df46112029f19dc98f84014af

    • SHA512

      ea318549af1caf88c8789881360a8718256b9752642be31ac89cbffb6cc6406bf9a99779894208e117954b562b4a0754433e760b37bfb98c5a3540037d71c3b9

    • SSDEEP

      3072:Cu32xlnAm9orZc9cHSBKz5B1clewlcUrXt54EnBm0QeWvu:9mTwSBKzL14hvIEA0Qeau

    Score
    10/10
    oskicredential_accessdiscoveryinfostealerspywarestealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks