Extracted

Extracted

• • Target

    c1c8aa2aa86505a6b4e2d7ac0d296d0a778c871e054b990b321312983c96c3f8

  • Size

    551KB

  • MD5

    73219b98755d8df139784c3b797ac88b

  • SHA1

    95540c08b3977913f7ef4be031a6f47f6f1c2fa6

  • SHA256

    c1c8aa2aa86505a6b4e2d7ac0d296d0a778c871e054b990b321312983c96c3f8

  • SHA512

    af28ff941cccd654d0e2e4d0b300cb47b3304cbf5e838371f77542c7f7ce6694031d2c6a71b57ff0a688c8a2964c3f2cfa1409ba8f47b2b57b87a3e7e8fcf5c8

  • SSDEEP

    12288:tLMb3AhDsvejrmV4R22iyGHrP1rBQYLZPhIpw2R/LVmhkNgJFsP:tLOSucmVd2rcaoPhIpqU+o

  Score

  10^/10

  lummavidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2