Extracted

• • Target

    sosi.exe

  • Size

    200KB

  • MD5

    46336799625b777d6ac52bff81d5604c

  • SHA1

    0133461342d41df2e31f8a48c957c63c99793992

  • SHA256

    dce3cfe541188e0267da98342cecd47a6acdaec6827e6e7be35ffdc823c22a71

  • SHA512

    b8c04a060a7874000f6c4000079b50d14d28ca9286d1dde05997520509aa207e5c095ee1b15f3a782c19eab7f7aa054a69d0d974b2579cf199b0ef1e9cb1e480

  • SSDEEP

    3072:WfUomEuYm98dlSq7gt5q7Dx+XgS6aCEwhOfUbCalNT2pbB3fIq1Xi6FLPo3c:WfUauY68uSWCx+XA7mg2pNn1Ljo3c

  Score

  10^/10

  oskicredential_accessdiscoveryinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Oski family

    oski

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1