Extracted

• • Target

    2353ef140fcfb38add13c74b388b710d.exe

  • Size

    290KB

  • MD5

    2353ef140fcfb38add13c74b388b710d

  • SHA1

    4c7f18fc0fc379e232df0303dd80654d693e45b5

  • SHA256

    17fda4fb35aa42510fe2ae20d26a6d74ee65075ce95a084c32ca9548a58838a0

  • SHA512

    d0f18c59678592ac7c123bafdf963a4d5ae36adbecc37fd4e4fd4f786033ad01b366cbb174498f0709bb2006a865463f01c20522ddefda2b3e196a56b0a58c5c

  • SSDEEP

    6144:w1S2o9ph6wYDkInQFXYFed9jjzehAMwr71V82IXRn:ws20ZUZFijzehAMz2S

  Score

  10^/10

  vidare22d2e68f8601f5538d68ac735f8c50ddiscoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2