Extracted

• • Target

    244e34d80127109ce2223fbadd07131db88a17193c63aedbc2ce8f4ca5990129

  • Size

    1.8MB

  • MD5

    93a77aa3e940d09d24bed59430e93e77

  • SHA1

    fdbb3b67c8c086895585bb45e05c7fbc865c78c0

  • SHA256

    244e34d80127109ce2223fbadd07131db88a17193c63aedbc2ce8f4ca5990129

  • SHA512

    bbdbb29a86f2eb24324220179b99845a941acaf923cefe713d1bee7a2b5bb6396a97621db337093b7595ddb8cbf9dd2d7fc504c44a0b0be6a3f8878f78dc28db

  Score

  10^/10

  oskievasioninfostealerspywarestealertrojan

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks whether UAC is enabled

    evasiontrojan

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2