Extracted

• • Target

    86772d44d0e2a57a8c2c0c410dc8b5380b2be24d078f0c79c05c9daaa56cd682.exe

  • Size

    3.7MB

  • MD5

    93ac3eec07e9598362d48f4d10b75a8b

  • SHA1

    d1bacd1badd23863888955729612be3b6475a175

  • SHA256

    86772d44d0e2a57a8c2c0c410dc8b5380b2be24d078f0c79c05c9daaa56cd682

  • SHA512

    2f7bcc46644f2cb7fab8c2b2ff7bbe7feac772b739817430c254f12bf8836e96683f8e3e057becc8e496817f57205d7680b5cc90c25bd4c64e143dae8dd35efb

  • SSDEEP

    98304:MPqs7vKIYtlgn6d8b7JINdZ+P/v/zhh8+TrB:MP77vKBtl6bW5K/zj

  Score

  10^/10

  vidar6c52ac55967452d85aefb425eaa6d53dcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2