Extracted

• • Target
    406171ecbe8c3d96852acef91ec2e6db
  • Size 571KB
  • SHA256 8e07cf5e12ed70918b410fdb95fdf6905c191df169df5fdf994daac99c8bd359
  • MD5 406171ecbe8c3d96852acef91ec2e6db
  • SHA1 5fb7a4fc46659b510fbcbb51d9e08bdf08490b62
  • SHA512 d0c472148ded74e627d33f1f1124b9275ba8ab9d2cb1443a88ebfecce57755b7e88d39e77819bbba75dad6cf905ba85e5372ca9341790f56e121263ababf10a3
  • SSDEEP 12288:B5tM+E02iNv4sxxrMAbU3Sg9r28R1g9lHQI0uS:vbE01usjMMuSg96WIjV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  oskiinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2