Extracted

• • Target
    SecuriteInfo.com.W32.AIDetect.malware1.24699.23437
  • Size 778KB
  • SHA256 a0cd7c3b8bd48fcccd71e09af5751dfa98dd90b797a4272f22b213708632ad6f
  • MD5 33bd29945812a1e8e7404bdc50ca248f
  • SHA1 86b379511263e633db0ffb17974df6f3fbf9ab83
  • SHA512 a6a4bda6c9dd3e2896a579289415491e7ad96b1b1d377e4e850ceba148944c3f60148212bce96b802cb502fef7113774fc3df61fd4f66a49533bcaa6cd26a8b2
  • MD5 SHA1 SHA512

  Score

  10^/10

  vidar903discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar Stealer

    stealer

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2