Extracted

Extracted

• • Target

    8b5c6a2b226e7c6ba532e8448d6bfc82

  • Size

    1.4MB

  • MD5

    8b5c6a2b226e7c6ba532e8448d6bfc82

  • SHA1

    723acb3cba81639e58e0041da83f2db58077cedf

  • SHA256

    2a71fdd923c2c1cf13ffee31c74aed4a464ff0c97cf9a6c42a788d4fdcec3efd

  • SHA512

    3f994a7f1edbd35f5c0d66868a5ba848d501849f185012cfe86224f1be5fa03efd1dfea8494d270cd8a08f03a07f90d9ae990fabb88964a510b208227ab1b997

  • SSDEEP

    24576:WzbGHAzHAjX18cLgGglNv9lyttyCKiCtXNs4sHqQDmMmkZ5TQ1oj5+QPybODrB++:WziHIaEG+strCPsDFp/6e98OM

  Score

  10^/10

  oskiinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2