Extracted

• • Target

    d1bd0c0a32f154e4a9c6eca1eafee762ccea17a390706025b63e657f0305f432

  • Size

    403KB

  • MD5

    c7f95fc671d7bf1bec293e9500577bcf

  • SHA1

    5366030099354e76ab5f8b8df4b2e226a29679ef

  • SHA256

    d1bd0c0a32f154e4a9c6eca1eafee762ccea17a390706025b63e657f0305f432

  • SHA512

    82b932b03c091cf27c4671ae2bf14a35b4c9a80d0eca01204cc67b85ff215468d2de2db6f2950df9a86c165fbbe2156bb5314e8fcf841b7439badfa122eec99f

  • SSDEEP

    12288:OpY+s+t6FNRj4nNZSojxNHtbU3ZanTYYGea84Km7ZsjnxEO:sD6FNl8rjntQ3I8YGbnKm7Zat

  Score

  10^/10

  vidar3a15237aa92dcd8ccca447211fb5fc2adiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2