oski | c9276a78a7dfb0c9dd3f5c19c5da3c965e0e63ab9c02b6192edb2c7dc21e7b9d | Triage

Submit
Reports

Overview

overview

Static

static

3

abb7d2d64e...18.exe

windows7-x64

3

abb7d2d64e...18.exe

windows10-2004-x64

Sharing

General

Target

abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118
Size

447KB
Sample

240614-17js4ayaqd
MD5

abb7d2d64ee38fb8fb9b0191126a280c
SHA1

c586ef2a76ce32d55cf213e56e377f05d8b0ab51
SHA256

c9276a78a7dfb0c9dd3f5c19c5da3c965e0e63ab9c02b6192edb2c7dc21e7b9d
SHA512

ee3d20c9db57e02d1c1ad28c960334991acf2cadb395d7de35f847c93a6f5ddb1006c929c87c7d277756c82f97efb026fbd55062cd5340ef250f10fe0211d91c
SSDEEP

12288:kywn9vaSJgiwiKzHrIbXTpLFiYhI04kMTJ:9eKIDTpLFiYO04kM1

Score

10^/10

oski infostealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118.exe

Resource

win10v2004-20240611-en

oski infostealer

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  abb7d2d64ee38fb8fb9b0191126a280c_JaffaCakes118
- Size
  
  447KB
- MD5
  
  abb7d2d64ee38fb8fb9b0191126a280c
- SHA1
  
  c586ef2a76ce32d55cf213e56e377f05d8b0ab51
- SHA256
  
  c9276a78a7dfb0c9dd3f5c19c5da3c965e0e63ab9c02b6192edb2c7dc21e7b9d
- SHA512
  
  ee3d20c9db57e02d1c1ad28c960334991acf2cadb395d7de35f847c93a6f5ddb1006c929c87c7d277756c82f97efb026fbd55062cd5340ef250f10fe0211d91c
- SSDEEP
  
  12288:kywn9vaSJgiwiKzHrIbXTpLFiYhI04kMTJ:9eKIDTpLFiYO04kM1
Score

10^/10

oski infostealer
- Oski
  Oski is an infostealer targeting browser data, crypto wallets.
  infostealer oski
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

oskiinfostealer

© 2018-2024

Terms | Privacy