Extracted

• • Target

    Install.exe

  • Size

    656.9MB

  • MD5

    34b50b71e59e1c5fd2b491ccfb1ca125

  • SHA1

    bc4502b87f7921699e3a28bc45e108acc05d165d

  • SHA256

    90b01db1de89cb0fb3f7b892a6cb3cabdea7f8368bc009170443e10ce1b78c3c

  • SHA512

    80b4f5ba978b5f538e678a4ec8e81ebacf4aa3f1d9c0be96ec1cd7f94785bc95fa1a275ec92002849fafbdffdcf34016753763b697b7016b78a05a0bd00c2071

  • SSDEEP

    12582912:VQyQyQyQyQyQyQyQtQyQyQyQyQyQyQyQtQyQyQyQyQyQyQyQtQyQyQyQyQyQyQyb:VnnnnnnnOnnnnnnnOnnnnnnnOnnnnnnb

  Score

  10^/10

  vidare907ec0c14f61e0147d368429250cda1discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2