Extracted

• • Target
    61a925edd99f92d6aca205cb8c68de84.exe
  • Size 356KB
  • SHA256 b40106ff8758aafebd4a521af40467b1693537bce239bea4b07deac8ea925f93
  • MD5 61a925edd99f92d6aca205cb8c68de84
  • SHA1 7d6b695ee6329a3a30731deebd5db94f849083b7
  • SHA512 ff89f95584b7b5e27cd652689c45f518e828abb0e60b5ffdd1bf17e75cb45b4bf86a4f1607a5b41e8cb3cfd7cb0bf2e0533dcc80cbf9b14d1ea3ad4efb350935
  • SSDEEP 6144:9peHwLG1jejKutaav59nMeG0SUidT6xS+wrjHncilUDFJeGgglZwj:9peHwqFeeuL9MpNUigx/EjcilKgIqj
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  vidar1707discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2