Extracted

• • Target

    GuardiansOfThrone_Launcher.exe

  • Size

    709.1MB

  • MD5

    fc8ead8c901e145a8e57195135c156ef

  • SHA1

    97b54fff7fe033022a59d039cad011264b22e6fa

  • SHA256

    7d63ff2baeba1d9f30b05e3eaff761eb1e659fed6583ce8f147a988a5c3491e2

  • SHA512

    4268321b870320a1c892705293d1e96303b488f60697aacb609a13105d1a6a2a014e0eec2631639b2ccc2fe1a735aeccd874a96d7e08a20f2ebe21b774c8e5a3

  • SSDEEP

    12288:ceD12u7YVn46SeE3IBFtleBI7swYqUKmiBV0A:chfn4ME6FtNpYZK

  Score

  10^/10

  vidar1784discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2behavioral3