Extracted

• • Target
    3ba001e8e863ae4f55348ebb1a4920e4.exe
  • Size 681KB
  • SHA256 33d11a4638d2d62f2c7d4e3f51f1c192f30b831f4b39c9485be7c55bb89bfdb1
  • MD5 3ba001e8e863ae4f55348ebb1a4920e4
  • SHA1 7fff3946a1816a161c1d81114c20e8eb97be0779
  • SHA512 bd2d2f592c0a5024bca15a16a977772e761041af044c66f613e51673e86c22f63f71a9bf91d50ce200d7b9028898fa1dca92ed3c190c405a7115700560ab5179
  • MD5 SHA1 SHA512

  Score

  10^/10

  vidar890discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar Stealer

    stealer

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2