Extracted

Extracted

• • Target

    4e849d1441cd9db1675e9259e0233552

  • Size

    1.4MB

  • MD5

    4e849d1441cd9db1675e9259e0233552

  • SHA1

    05d51a132a5cc55bf5dc1b0c3c71583d09b41928

  • SHA256

    6f7e9f7592b5f984d3c6a7233f5f3b483593aa1dc1e9aea19d1477f2214fe48c

  • SHA512

    b4f820f1c74eb7bc6aee81be798d5127eae1e862329c52af6f089f3ce4a463c524b611963e943a598cd14f269afca508fb46331efef9ec054f75a41e7cf8afdc

  • SSDEEP

    24576:WzbGHAzHAjX1zcLgoFifXiBiRXInRzxgqaqfR3hxjkY9bFX:WziHIFEMIyKEzKqaqfR3b5H

  Score

  10^/10

  oskiinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2