Extracted

• • Target

    3b914f143432c17ca607ba232ba0122f78096dc04dd7ce3d297ed0036f3b1545

  • Size

    403KB

  • MD5

    77011ba24d1088a963898abc72c6e129

  • SHA1

    08a84da40cb625471026568b2399538399b44f98

  • SHA256

    3b914f143432c17ca607ba232ba0122f78096dc04dd7ce3d297ed0036f3b1545

  • SHA512

    91e07652791eb55cc4684a97daa119cea2608e03b213675b43751aac9682955e6f36dc7b0ebf471778063182312abbc1dfb9925f95c29399daaeac614c933ba6

  • SSDEEP

    12288:uJ8GsZTOusN+VVrto1ma41z1esugf9xmolEO:uJ8vTOFN+VVZo1ma4B1eQ/met

  Score

  10^/10

  vidar58cd250b15e666e5f72fcf5caa6cb131discoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2