Extracted

Extracted

• • Target

    90f8d0abc7d1a0ae347d55a554f30c10d025123e834a659da2c3f036af8dddc4

  • Size

    2.0MB

  • MD5

    66e9928a0a8de34da7d3fbfaee49133c

  • SHA1

    7f80fd7852ac96124a4a56d54ef9286f95b61323

  • SHA256

    90f8d0abc7d1a0ae347d55a554f30c10d025123e834a659da2c3f036af8dddc4

  • SHA512

    3f556039eb721c912211206cfea9d3a8a55efa1c22558c5bd39fc99b3c967c86285a72efbab963f1236b5d07355511ba1db7be83bbebb527394b818579fc1027

  • SSDEEP

    49152:eqtdPVosJE0z/+VHA58ljrIY+96lJS9bZ:e6d9fJFc7jvedZ

  Score

  10^/10

  stealcvidardiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2