Extracted

Extracted

• • Target

    RFQ 6020943651-FOR-ATENS.xls.xll

  • Size

    879KB

  • MD5

    2344d5013ae84f4d70bf359575fba402

  • SHA1

    ed763a02ea15c388ec462cb9a4dfba22d0248631

  • SHA256

    338ffcde4891ef19f8b2974f2a9188e14a90f592322c8fb07acb662b57b35771

  • SHA512

    0d532edf4d2a6d2daab537dcb8e8e1b50cb0b27c3b0e4745b9748a06ecc287f025c77e1ee68172454b63a916e66bb611a930e2a0d22c1ff5922d2e98121e0a3d

  • SSDEEP

    24576:pzbGHAzHAjX1lcLgUarYin3qy8sCwFCvlFC:pziHIvEzn3qy8QFW

  Score

  10^/10

  oskiinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2