Extracted

• • Target
    SecuriteInfo.com.W32.AIDetect.malware1.26152.21987
  • Size 739KB
  • SHA256 5345793ca6c08d8fbc737e5f3833a2f3f8cf2ece34fe09b125f82a103eea01cf
  • MD5 ce3160e68d7556a3fc4f12f1e430610d
  • SHA1 851626a87ae059356bc6ec5d4d1dfa80d34bbd38
  • SHA512 1524ba1321dfd0bcfe7e0882eda8e82a1721365af36ee0389ffc804159ec4c32d071961fe0bed3758021691c395d1acc6c682575aba2b3c4c9548848f9715a3b
  • MD5 SHA1 SHA512

  Score

  10^/10

  vidar916discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar Stealer

    stealer

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2