Extracted

• • Target

    ffaa9755239587c3b4678da8afa6dd9c_JaffaCakes118

  • Size

    894KB

  • MD5

    ffaa9755239587c3b4678da8afa6dd9c

  • SHA1

    71a981250a9bac4dbb517196c86adca52a22244b

  • SHA256

    2e970f330612770b2d3b786690aa6dd847a0d4773cc726fdc5df1dd9338d6e07

  • SHA512

    c9651d254e4083afbfae36c3ffa4c4886607a82070fe2ff9548c2528c53c06c6552003c1d5a1ef8f97332ae139392e42ad25e94e6da37564c6b8aece558aafd6

  • SSDEEP

    12288:phvirSme9I5UJaeutyLgiPxl6MkneDogS7qn+QHnFsVjs7YtiwS0:/Me93attKgiDt3S7ULHnhcpS

  Score

  10^/10

  oskiinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2