Extracted

• • Target
    SecuriteInfo.com.Ransom.Stop.Z5.27157.7517
  • Size 743KB
  • SHA256 bf4d1dcd4b9129f47ec4239fa5a33e00c981e5fac5b8be880b76d2a1f5753c34
  • MD5 69056288771b40a05572c690bfda2518
  • SHA1 5accd01f4e9863a28fec911ca6a169a8e3ff741d
  • SHA512 371096c5a88d7eba221a7e8ea732bdbc6ca1d5538552ee9cddea89f8d643a59d8aada1b862533cad93fbc1ef656f33f0a69c75442729d16174b8be209fe4e923
  • MD5 SHA1 SHA512

  Score

  10^/10

  vidar903stealerdiscoveryspyware

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar Stealer

    stealer

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2