Extracted

• • Target
    080958e3ca9cddb9037f855f4197aa20.exe
  • Size 394KB
  • SHA256 dd70a47787c8ac3d9b13ce2d25ddae959df0f9fa3e889d4977e35e975a76a548
  • MD5 080958e3ca9cddb9037f855f4197aa20
  • SHA1 2e824709e4d419eb91dbbfc0cbe6d5ac819df3ca
  • SHA512 aeee1c3e61f71143e62e98830cd728e279ae369cd380a94b0f7928e1db8fcb3c130227fc830b9e31fdeb5840ccf8a9b8bf9c5c266d46028ee98ce53f8bdf6652
  • MD5 SHA1 SHA512

  Score

  10^/10

  vidar1448stealerdiscoveryspywaresuricata

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • suricata: ET MALWARE Vidar/Arkei/Megumin Stealer Keywords Retrieved

    suricata: ET MALWARE Vidar/Arkei/Megumin Stealer Keywords Retrieved

    suricata

  • suricata: ET MALWARE W32/Agent.OGR!tr.pws Stealer

    suricata: ET MALWARE W32/Agent.OGR!tr.pws Stealer

    suricata

  • Vidar Stealer

    stealer

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2