General

  • Target

    12eeeadf5626cf41cbf05b1db0a23f78_JaffaCakes118

  • Size

    871KB

  • Sample

    240504-qpjp9sab22

  • MD5

    12eeeadf5626cf41cbf05b1db0a23f78

  • SHA1

    0826913ebb9f29379c1dad462b1de714e431dd40

  • SHA256

    92d789df7c26d20dd26f11307faec025ac5181bb4e1407c358a47ae2171af488

  • SHA512

    fae58682028a143f93f73c179be67c0c3dff48fb9d7bac05a11e919775ac7138b82b6498abe3d875cd86cae128a9bada2b7fe04e2a2b0fe4973b8d1890e9c302

  • SSDEEP

    12288:J45nhDbVI3excy1L1x1D0XKZ0XdenaPbvaHMQGFUMU2vzhMLD3BezpJc+VSoPiDL:yhDb+Kn1oaZ0XdenaPeMQGFUxHDU1q

Malware Config

Extracted

Family

oski

C2

ebatsosatpizdec.com

Targets

    • Target

      12eeeadf5626cf41cbf05b1db0a23f78_JaffaCakes118

    • Size

      871KB

    • MD5

      12eeeadf5626cf41cbf05b1db0a23f78

    • SHA1

      0826913ebb9f29379c1dad462b1de714e431dd40

    • SHA256

      92d789df7c26d20dd26f11307faec025ac5181bb4e1407c358a47ae2171af488

    • SHA512

      fae58682028a143f93f73c179be67c0c3dff48fb9d7bac05a11e919775ac7138b82b6498abe3d875cd86cae128a9bada2b7fe04e2a2b0fe4973b8d1890e9c302

    • SSDEEP

      12288:J45nhDbVI3excy1L1x1D0XKZ0XdenaPbvaHMQGFUMU2vzhMLD3BezpJc+VSoPiDL:yhDb+Kn1oaZ0XdenaPeMQGFUxHDU1q

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Collection

Data from Local System

1
T1005

Tasks