Extracted

• • Target

    https://samples.vx-underground.org/Samples/Families/Oski/fdd060d4ee221701282ca13c743cc95965708d71a975691f04e300a99fd23916.7z

  Score

  10^/10

  oskievasioninfostealerspywarestealertrojan

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks whether UAC is enabled

    evasiontrojan

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1