General

  • Target

    JaffaCakes118_ab031839b4f841c3b709fdeb2f8d2889

  • Size

    375KB

  • Sample

    250108-zb4yqaslhw

  • MD5

    ab031839b4f841c3b709fdeb2f8d2889

  • SHA1

    6c9e7d0f2a212fda955802586713d8996ff5d11d

  • SHA256

    65d44c4290e2bab8287d1a51f22a5ce6b72e989126975bd9e99692a693008b0f

  • SHA512

    0c4cb8190b9bce977b3df9cc12b725967cd68e8bb689c587306496bb835216174f838785f45720f7721c7be3f55abaf552dd310c0bd9dd352a8143826d3f7755

  • SSDEEP

    6144:1BlL/G4BUKkY3PBmgaklTZFbsIG5RQzq6IvpnwxByMmSo/mpC:jY4BNPBTaSZqIG5RQWd1HNOpC

Malware Config

Extracted

Family

oski

C2

vegas1e.xyz

Targets

    • Target

      JaffaCakes118_ab031839b4f841c3b709fdeb2f8d2889

    • Size

      375KB

    • MD5

      ab031839b4f841c3b709fdeb2f8d2889

    • SHA1

      6c9e7d0f2a212fda955802586713d8996ff5d11d

    • SHA256

      65d44c4290e2bab8287d1a51f22a5ce6b72e989126975bd9e99692a693008b0f

    • SHA512

      0c4cb8190b9bce977b3df9cc12b725967cd68e8bb689c587306496bb835216174f838785f45720f7721c7be3f55abaf552dd310c0bd9dd352a8143826d3f7755

    • SSDEEP

      6144:1BlL/G4BUKkY3PBmgaklTZFbsIG5RQzq6IvpnwxByMmSo/mpC:jY4BNPBTaSZqIG5RQWd1HNOpC

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Oski family

    • Loads dropped DLL

    • Target

      $PLUGINSDIR/bjvymjgfvgw.dll

    • Size

      21KB

    • MD5

      c82d0e41e34f602a656c7b2383b461c3

    • SHA1

      5d6cda3477276064e3f68c5e46819b7c59439667

    • SHA256

      10a63a0ce01a0ee1af0fea454eba728754e4c8baf040965bc49cc850556436d7

    • SHA512

      8ad0f3038d13b0efaca3a19fdce1d6b77ff5b78f1dc994bd8bbcfe909752e66abfc5550e494b6aaae0bbe043500c9bcd1f4e8d055eb2c41432cbf62316ca709b

    • SSDEEP

      384:OKQcFRDe82Eods0/9GGCIZKR7dYJS2N7vV:xQcFR6rfgj+RJ

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Oski family

MITRE ATT&CK Enterprise v15

Tasks