Extracted

Extracted

• • Target

    6855feaad22b9fab33f782a030dca8efeceb300eb547e0a9ce5cb36520f1bddc.exe

  • Size

    598KB

  • MD5

    8fd06cfe41c9aa5a7b58488d0bc2bd18

  • SHA1

    915937f169d3dc5fe918435e81f645074304cf9c

  • SHA256

    6855feaad22b9fab33f782a030dca8efeceb300eb547e0a9ce5cb36520f1bddc

  • SHA512

    57f51f7a42108d41f4583fec480d35e634b5d228c49adee24d1c21e0a01142f8edd2781ff8a1168e8350e7d988da2eaf3e0fd53b6a1a5aac891225d2a4e5ab3b

  • SSDEEP

    12288:VUqvMSDFMq2q0KOfCy2PD4OCB7lR4Cdxd/8eWS64fLETEO:VU8HDFFOayc1CB7laCtS+mt

  Score

  10^/10

  lummavidar8ecc9c7eaebfdf2a8cc0586d7419d6eacredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2