Extracted

• • Target

    03972c7f3b0df942d4e0a1e11956e523_JaffaCakes118

  • Size

    884KB

  • MD5

    03972c7f3b0df942d4e0a1e11956e523

  • SHA1

    55675cc5594b4731ab268fa2e1ff35df892de7df

  • SHA256

    42c682af79cf1b73127ebf00349a8c4cabccdf42d2e14f77cda67121f870d8bf

  • SHA512

    2d3b1865a41cbf9d6d909d481e7275ff0adda1b8a404b1015e9ff74c943509cdd490ebb5252301609f12f75c392275bc382b21d9044c86d0aef394c937b43ca1

  • SSDEEP

    12288:PdjGXt2ghPHK7zt4QKvq7Mlax3UAXynyGPl+U8av4ORx:VGXt2g4R3Kvsl3XOd8LC

  Score

  10^/10

  discoveryoskiinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2