Extracted

• • Target

    5c7fc960d3e00ab148e991b9be2137a0b0565c1d32f30fe91c3d894647f33980

  • Size

    2.2MB

  • MD5

    c6c28e719c1ab67000be15581f6dafff

  • SHA1

    52b01bdb3b1c0c36ec6d191852e967c02fd48a2d

  • SHA256

    5c7fc960d3e00ab148e991b9be2137a0b0565c1d32f30fe91c3d894647f33980

  • SHA512

    b9143e859ba72e8cd50f329248a43e8d3ba74c540906a128223e6aec4d3830aed98fb139bc2b98ae5da7fd5100e543af7ab7d8d5fd55954ef9502cf305ec9ada

  Score

  10^/10

  vidar869discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar Stealer

    stealer

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1