Extracted

• • Target
    Inchr_StExta_Itst_v.3.1.rar
  • Size 102.1MB
  • SHA256 a4b05d52ea75d56b2e6ba0a153eb638290b546a86e5702b6ab1a15243a1e25a7
  • MD5 b35a8f49f22ba7206fad6526ac34f676
  • SHA1 6a891561a94655ae415b588104e62e5b0bb4d56f
  • SHA512 e9713bd82429611fd5799470a5e19defa09d960d336245733f38f08b4dbbbc67b6b7fa4a6a09a8885c0ac3f6605e82675ca8deee2103f85ee0782c44c6daaf0e
  • SSDEEP 3145728:okTYasCFkAhweVB8SWh/s1ncJVn+t6Y7MREum8ySR1F:zkAhwjSWRCc/+t6EMRMBSR1F
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  vidarcd7c97cce7ba52cbbfd2d03e0a6f87c3stealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2