Extracted

Extracted

• • Target

    454cc1022d742608516bc98da91be893556f594efcf036b837b4e214b40fdbc2

  • Size

    571KB

  • MD5

    ce42368b4e2e6ac175dcf2f8e2a9729c

  • SHA1

    95cf67c3b6e2e261f0b86a69cbfeb05c30307381

  • SHA256

    454cc1022d742608516bc98da91be893556f594efcf036b837b4e214b40fdbc2

  • SHA512

    3244fab9ce4307f9f5baede97f697fafb434d64ae7eec096dd9a686caf9fe7d7023df3965cb661a0673c1d61d6e3b7553834f094aa6bb28b7342fb3e81218a89

  • SSDEEP

    12288:ygoEhvQ9zcMW21fTEjv75YGFDErZq0q5ORS4S:y+vQjIjz5hWS5S

  Score

  10^/10

  lummavidar4a5bc8b73e12425adc3c399da8136891credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2