Extracted

• • Target

    eaec2f04454eb468c1f591be0487daec463582c2a1d839b2644f3df7ac449b7a

  • Size

    413KB

  • MD5

    0656946b783a6df8ff57c45846e49de1

  • SHA1

    5e5857484282f4e4d636d6558014859242b6a8f7

  • SHA256

    eaec2f04454eb468c1f591be0487daec463582c2a1d839b2644f3df7ac449b7a

  • SHA512

    a409d30407773f4bb8bb087352e835765460fd3557a6570e1159b01988dd1601d15a7472958b8d41509da896ec365b7b61964413d0846763a8faff511458106d

  • SSDEEP

    12288:tUxpOKa8zz8WB4fZLtjEJNThSymzi0hMQwXFqEO:6Jzz8WUZLtjS5hHQi0TwXUt

  Score

  10^/10

  vidard80be45a1eb6454ca916f92c36ebf67ddiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2