Extracted

• • Target

    ef0ad84528750e2dc891ed819018c7c0d28fe038c92fd2612a5f26ad9863736c

  • Size

    394KB

  • MD5

    c41324a0ed75ade060a048d20be4bb0b

  • SHA1

    cb60c01d5de4c7666095e61553573e813625d177

  • SHA256

    ef0ad84528750e2dc891ed819018c7c0d28fe038c92fd2612a5f26ad9863736c

  • SHA512

    7874707dfb5c2107f24d6889b4720fe8bc127028f49b6a88869b0769f8956bb4135a3a3b926e03adfcfb5dddf5475451ad7ec7bac106751eb34015e4b9ee116c

  • SSDEEP

    12288:aloPGt8jdL8EkgOMAcr08Y2ji7GHVPB5n8Ba8r:ql2dLig5AcA8YOiSHVJ5nUaQ

  Score

  10^/10

  vidar3a15237aa92dcd8ccca447211fb5fc2adiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2