Extracted

• • Target

    cpu-z_setup.exe

  • Size

    294.7MB

  • MD5

    091693913d3cba2023dd37fbdb9e8e36

  • SHA1

    c83182954915d4126dbd702e3cdcbcaa66999184

  • SHA256

    72d25540d3919e2ea7226deb8434c997f6044004a389b220748659a09a7f296e

  • SHA512

    9ce6c17ed444c55129e2183c50a7d59736a88b0931af3f9a959e39338b5efedfe36135703174031abbd7588068d65aba84da60b37eeddc500da1f6de20cb9d5c

  • SSDEEP

    12288:OT6lJ1fDwWiqE3wpGtb6RbivgVBhNbiYW:BlJ1MNqE36GSivgDvbiY

  Score

  10^/10

  vidar698discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2