Extracted

Extracted

• • Target

    f1bedbd519ad0e2f211b23fbed256dbf274e72c591d6133a77d712f6a894ea6f

  • Size

    571KB

  • MD5

    b270daf24c1132b993e6e255c4002921

  • SHA1

    9ac7da477b692b9cfc6694a8e9b298dc0c857604

  • SHA256

    f1bedbd519ad0e2f211b23fbed256dbf274e72c591d6133a77d712f6a894ea6f

  • SHA512

    4283828e09fb4b2a8efb689bbd206579c3b1a338df96eb9859941ee92216b608193e655ca15e029dfe9c5ae16ae28a9620921094dcbe6e92c8712b22c0434a0c

  • SSDEEP

    12288:smQcpXoWDMLx62PeCCqdxTR3Cl+QKa30lYnuKhSLD4S:soXo9VTRCf0lbgSLs

  Score

  10^/10

  lummavidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2