Overview

overview

10

Static

static

3

New Order_...33.exe

windows7-x64

10

New Order_...33.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    245a3d0c4230cbb9b04c98459eec2cec_JaffaCakes118

  • Size

    942KB

  • Sample

    241008-yb2b6ayckq

  • MD5

    245a3d0c4230cbb9b04c98459eec2cec

  • SHA1

    1653f9135d6a2931942a24d1dc9773aabe1591e6

  • SHA256

    e38286df473bf02a6fad93aa93a5fbd283faca53a5b52157955cce229a1dc1a0

  • SHA512

    6aab5979a049d57cfed484196edd9553eb825e71a8c7c20bd32e350b7e5cf5da36fd0ca27968c44caa052820930027f3ecd1959c9ab00a10c0729967f87e354a

  • SSDEEP

    12288:Oplvxon3qGaNHEyC9/oR9gy5ZHK7z1S6TNCTm9H1tVwH9gd0pod3zBts7Vl+YJtm:fPp9AR95SbTIg1Bd4od0+YzR0xz6KV

Score
10/10
oskidiscoveryinfostealer

Malware Config

Extracted

Family

oski

C2

kckark.xyz

Targets

    • Target

      New Order_78947533.exe

    • Size

      881KB

    • MD5

      7f05dc92a62ddd277baaeb55ebcfa407

    • SHA1

      23c8c1a1a8d16180980f4b38a47832738f947141

    • SHA256

      06c8a1e6544aede327bad32a5732d5bcfff143da73da01d34938efbe917e3289

    • SHA512

      3cf46fbbf2e197b15fff65b3250f05add05537e534371ee50c8f0fe6524d4d32717d25ec79c60b8ebd1ed34b99d36522202834ac927fe3e1be5abb7c298768ef

    • SSDEEP

      12288:oplvxon3qGaNHEyC9/oR9gy5ZHK7z1S6TNCTm9H1tVwH9gd0pod3zBts7Vl+YJtm:dPp9AR95SbTIg1Bd4od0+YzR0xz6KV

    Score
    10/10
    oskidiscoveryinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks