Extracted

• • Target

    PURCHASE ORDER AZAS112.xls.xll

  • Size

    880KB

  • MD5

    4ebc548df517cae4c7e3122e9c75ede6

  • SHA1

    6e19e1e6f3a7b96cf562c2f6768f92580652d427

  • SHA256

    6c67e1ccf77b872b1f3cf257a257d75c4995dc079945080f578b51357ccdbe55

  • SHA512

    359be199470a83ad32db555840c5b33a6b69db96cc188d83d550639fe9fe75464529819fdf0cded9d489cb7ba03802667ac373d3ad2a3f7e4069b023c8508290

  • SSDEEP

    24576:/zbGHAzHAjX1BcLgtBoKF0KihRPX0qFNE:/ziHILEV6Fm

  Score

  10^/10

  oskiinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2