Extracted

• • Target
    8663ed0caec9adcb980a4a7ea23e7984
  • Size 1.3MB
  • SHA256 bbe006688e5f74473a5e248bc83651cbb7e9efbe8410abb8d8b84b4a59ed7750
  • MD5 8663ed0caec9adcb980a4a7ea23e7984
  • SHA1 e6dcb19362e88b50ab1990e7032437072f104e98
  • SHA512 fd75e6bde035e103e84322411ca7b4107f1673d03170b940af3066f9f4eb58b063ec244302c8dccab87f5816e2b55a177dc1c1d7f498742fd8e0f24fb64317a9
  • SSDEEP 24576:0+Mt76DOkfx8Dgyfx8DgYd6ph9Jxg6AQ9l3zIiLsLznD9IzlTwDZYLL:Ot76B58Dgy58DgYd6XbxglkDIiLsLzng
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  oskiinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2