Extracted

• • Target

    Setup.exe

  • Size

    1.2MB

  • MD5

    874668a370b2c441858ec0e158e93eac

  • SHA1

    b207f81c2be1f2439aa89cd122df209b888cfa4e

  • SHA256

    8cce6a36008e38d23088b4ac426598957a4cd0f73fff384e6e587a441036406a

  • SHA512

    8fff5e336a83e39eaf95c8d1a7f3e96eba4067c4bb1f3516d668132544287d5c112cec7ad627268b06388de23a1f99da39c412f63f3897d55ceaa530b1824855

  • SSDEEP

    12288:S5wQHcGm97HBuvCoG/J3xGK711lSE4v5e08bMw:S5wka97HwDG/J3xh123RR

  Score

  10^/10

  vidar1702discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2