Extracted

• • Target

    Inchr_StExta_Itst_v.3.1.rar

  • Size

    102.1MB

  • MD5

    b35a8f49f22ba7206fad6526ac34f676

  • SHA1

    6a891561a94655ae415b588104e62e5b0bb4d56f

  • SHA256

    a4b05d52ea75d56b2e6ba0a153eb638290b546a86e5702b6ab1a15243a1e25a7

  • SHA512

    e9713bd82429611fd5799470a5e19defa09d960d336245733f38f08b4dbbbc67b6b7fa4a6a09a8885c0ac3f6605e82675ca8deee2103f85ee0782c44c6daaf0e

  • SSDEEP

    3145728:okTYasCFkAhweVB8SWh/s1ncJVn+t6Y7MREum8ySR1F:zkAhwjSWRCc/+t6EMRMBSR1F

  Score

  10^/10

  vidarcd7c97cce7ba52cbbfd2d03e0a6f87c3stealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2