Extracted

• • Target

    5404b9605d8226e51c5a2e9d4f63b31dc96539ecbff11c14138016e7838da1e5

  • Size

    858KB

  • MD5

    02edfdc2fb2ff2725436b7646b7f06ad

  • SHA1

    6b6f8ce5a57d18284afd2f819a713b1066fd6660

  • SHA256

    5404b9605d8226e51c5a2e9d4f63b31dc96539ecbff11c14138016e7838da1e5

  • SHA512

    62130603d4a276d5b2f19e14519e4a28c592646602a36a80cfbf4b6e3c5daa191c04a165165985940f4c1b0376fb34dd7253586d44042f4883bdb395f486b0dd

  • SSDEEP

    24576:gICXIncUD5fti6zrGgfF/4l2CxeE6ivsT8FTTnW:DiC5tiol4lrPvsUT

  Score

  10^/10

  vidar2e711c8b5340db8e327be6ebd943b70acredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2