Extracted

Extracted

• • Target

    SecuriteInfo.com.Win32.Malware-gen.198.6512.exe

  • Size

    4.8MB

  • MD5

    3d5d6485af7cd75f9cb1284a35e70f97

  • SHA1

    511388b6ef0247a952580e1aaa70e6e7646e35fb

  • SHA256

    d9598915932030d8c05825ef9d1d331cbea8cb887aa6570f96d3cec23c311411

  • SHA512

    c4340c7947b23b83c8acb2a08fdc599ad24fc891d9ac81e6b98b00509a681266d2f390cf7f10123504b4bffdf77a0108cd6249ca7272ac4f4bcd0d106b406e4a

  • SSDEEP

    98304:pSnTPjsgAvcAbjUTRl92dXeYbFhGLhWQDf6Z1a51:pSnT7bAEAbjUvoDhGLAaj

  Score

  10^/10

  stealcvidarspywarestealer

  • Detect Vidar Stealer

    stealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2