Extracted

• • Target

    buildjj_JC.exe

  • Size

    420KB

  • MD5

    3bb83d8faee0adb5b1e5281de2757d34

  • SHA1

    fa91b2403a17d73ec576bec86aad40c48c460c61

  • SHA256

    66337b6e8a6117d46ffbaed1ffce2345674e67106e27c97895f655a999511531

  • SHA512

    f455669988c2cf57c85f6ceee453cda6e1b8c548a24c48a876871ff5e40fd501fc2dcb19642cefe1b8039c85d1da25c095dc55c4353f2a210a51dd5f553d615a

  • SSDEEP

    12288:SeT3EEE1epldN4ICyJiGoN6HwKnbR7tmxGe9/jFFG60DG:SeT0EEMpldNuyJiYHwKbRm/j3I

  Score

  10^/10

  vidar8027148886cf270a67174e17ebea81f8discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2