Extracted

• • Target
    12b73c8f33b64dadcf0cecf53752d1b2.exe
  • Size 719KB
  • SHA256 f42b3b3342d496edda11ff983d90f5cb38d32dca38d9d3381eadd9d063eb19f2
  • MD5 12b73c8f33b64dadcf0cecf53752d1b2
  • SHA1 d76cd3b31177484f3fd53b3e5e7fcb57a11260d0
  • SHA512 ea7dcd413e39c2b0debe7004b22667a338990e2455508689df8f693452c67d1a2143ecf8834d0679acf6b5cab7b0794d5c7d7adbcee7abdf937d1d386496fb0f
  • MD5 SHA1 SHA512

  Score

  10^/10

  vidar1081discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar Stealer

    stealer

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2