Extracted

Extracted

Extracted

• • Target

    5aa5f829532b82d1d146841d843de9d3ab2278ba2c52402d51d18a5a2823872f.exe

  • Size

    411KB

  • MD5

    d5251bd2a4d9ee464b1dbb25245a67a7

  • SHA1

    a89c28d0c6f39475cf96c2129c4d10d73d0aa4b4

  • SHA256

    5aa5f829532b82d1d146841d843de9d3ab2278ba2c52402d51d18a5a2823872f

  • SHA512

    6a42887328eac8fc4036b08c01dd952ee7ee3640172e86cb4fd9654372ff8903ab8a616602e0f67f4192d63506bf92a6346b8ce3017eccbeab26c221e0451c4b

  • SSDEEP

    12288:7FWiaocklk/TYrcwBXCqE3iclBZkmYaugcCkVkNao:BzCcrPyqE7BOmYo

  Score

  10^/10

  discoverylummavidarb74ef0d8ce56e494b0d83e1d5be9dbebcredential_accessspywarestealer

  • Detect Vidar Stealer

    stealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2