Extracted

• • Target

    e9c2ae76f3c75635d6588866674757023c2dabd947abe8864cfbd155cf22e7ed.exe

  • Size

    416KB

  • MD5

    4b4b842e67389dbaa6756b528c317370

  • SHA1

    344abedefc91910c9feaa05c18714b067525e555

  • SHA256

    e9c2ae76f3c75635d6588866674757023c2dabd947abe8864cfbd155cf22e7ed

  • SHA512

    ac773f956aaccc2d0ede13ae2814f29c2b259d59a8a9a66ea761595a47c0c162f0b457d79ac1775050a21bc00486c08d1a52b179d8ff9b61b116e3b5e5e01e06

  • SSDEEP

    6144:pb+QWIhV2WPguI87PQOB3xbkuZanpNh2w75aqfyjL6KSgDoaC/MtStAr5ijt+g2U:AQnrw7AqfcLTSgEEVijNsED

  Score

  10^/10

  oskidiscoveryinfostealerspywarestealer

  • Oski

    Oski is an infostealer targeting browser data, crypto wallets.

    infostealeroski

  • Oski family

    oski

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2