Extracted

• • Target

    699f99c4fe9e5df1b13445278ba21139ee16200fc94051a735609c5d5a1076f6.exe

  • Size

    8.3MB

  • MD5

    65baa89a777d2177397a4e6d844cdadb

  • SHA1

    2003625efef2b70f1df8744556aa1d1a22ab3f54

  • SHA256

    699f99c4fe9e5df1b13445278ba21139ee16200fc94051a735609c5d5a1076f6

  • SHA512

    eaf5c004be82c627b0bb4d974495960346090f0e8f060bf1cbd01981bb78eb5c91bff2bf0fafe026d04e6399ae10ab84cfe1abd39bbb40554d4c7bb90c7cb12e

  • SSDEEP

    196608:AR6MGTjFrnGeFdJJMGHPP/CPZ5za/+qKcDxNY5fv7RFHnTKm:AdYjUeFV/m5zQAfHHTF

  Score

  10^/10

  vidar6c52ac55967452d85aefb425eaa6d53dcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2