Extracted

• • Target
    f8e49d0fae7bc7bffcecff73a2ae54a0.exe
  • Size 702KB
  • SHA256 f1e6ef95e8fb839899a496e6ce304bca0be925f2473d0f9ecf250ee6ba330233
  • MD5 f8e49d0fae7bc7bffcecff73a2ae54a0
  • SHA1 0c89a32d5894856fae08630d83becfa296fb50e2
  • SHA512 63db71baec3bda7329fb1ef20bed5c25026abddab271f33c2edfa0602eac4df3078bf7b82257545d4940e4429db829a273e6859b4cc37079e158c7448b6ea7fb
  • MD5 SHA1 SHA512

  Score

  10^/10

  vidar865discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar Stealer

    stealer

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2