Extracted

• • Target
    2024-07-25_eee333c1637253245c3fc51775ba7395_karagany_mafia_wapomi
  • Size 216KB
  • SHA256 e5824681466b0a8b36f470252d644bc5a4333d83a8987021df491b471ef8d473
  • MD5 eee333c1637253245c3fc51775ba7395
  • SHA1 bd111eaf7f7687a87de02aa87acdde9d4cd51eb8
  • SHA512 c3ad219bacb1c7fc2feb98848bbf61bd559ed9c6ec2ebfb9d4d7380fcd7b34a4f895be7b5f3ac3f588add74bcd8a4cefe6a9b58ad73310e862030ed0f942e087
  • SSDEEP 3072:efUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIh1Xi6FLPo3cCGCH:efUauY68uSWCx+XA7mg2pNQ1Ljo3cj
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  oskiaspackv2credential_accessdiscoveryinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2