Extracted

• • Target
    24a153750bd7f50c29bf2a0dca08baff
  • Size 734KB
  • SHA256 b0b5c0153c7a4e5e1fce6204f5e8e82f09afb7b720b4d31c45db95f6af83f2ef
  • MD5 24a153750bd7f50c29bf2a0dca08baff
  • SHA1 2f82a4afe6600f7fbcca2aed7cdbb2a77db0dae0
  • SHA512 997522b665c480593295926ef635018f7f2cb92a2f31c0d906453fc522f8b732acf7b094dce166bcb95615c8a29f593dfb7542acec8ad25d049b5b6786cd7dd0
  • MD5 SHA1 SHA512

  Score

  10^/10

  vidar1081discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar Stealer

    stealer

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2