Extracted

• • Target

    93148abdd911e1816cd75fa313c048fea164da7d1f9cc3a8bfc23587deb2262b

  • Size

    191KB

  • MD5

    380b11f8a23405b141467c3f563c4a22

  • SHA1

    39407e1ae2ccbb3552aea43b9f45aa90ac0c74ea

  • SHA256

    93148abdd911e1816cd75fa313c048fea164da7d1f9cc3a8bfc23587deb2262b

  • SHA512

    4a758d4f1638ec2d9d76e6f5b354109c6b19830d97dfc3299c2ab181b8128d7b6fdb5ea76327ed275ab5c31b6ac40306c48d3ae2fe418c256c312a96837bbcee

  • SSDEEP

    3072:Lrf54ASLffwf8Paqi+aW6S59fRjMYEYBi1YpfVtDhkHPlmzEef2LsWuEQPHOLKYp:LrBdSBCj7eMUBi1Uf31kHPlPDIWuEQPi

  Score

  10^/10

  vidar3cd4672c6baedc17edab0cb86e9453d1credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2