Extracted

Extracted

• • Target

    7f58110a24967742d030618fb30ec3e3a99180f4226e2a597d980b4bf5307210

  • Size

    580KB

  • MD5

    d9cf02c38cce994f0c0dcf4a8054d444

  • SHA1

    7f5cbf7db43f3acc08095c317c85362acd5f8b43

  • SHA256

    7f58110a24967742d030618fb30ec3e3a99180f4226e2a597d980b4bf5307210

  • SHA512

    140394cfcb4ea65915e885575b6d2bd7795363d8e672d5050b2a480431426acf17914d1f2b5afbb8c70e81827e782efe5c16904cfe5f99ed7047dd8a5a7e1409

  • SSDEEP

    12288:iK/vg3InPBF9dCi++6+cta+3fDF67k/gpl6uROrKw:iKg3IPk+6+ctauOkiAuREp

  Score

  10^/10

  lummavidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2