Extracted

Extracted

• • Target

    ae4652c4433d845665b44f36ba2e4188ca5e33a1df4ea3183af5f3cfbc0d3614.exe

  • Size

    598KB

  • MD5

    25f5bb6b3ac38fe55b9e09e198ec3a65

  • SHA1

    f60a23765859b7b1add8124c74d382b50484925d

  • SHA256

    ae4652c4433d845665b44f36ba2e4188ca5e33a1df4ea3183af5f3cfbc0d3614

  • SHA512

    c7f28ecaf9e9bcbd96b06beb7164f6d8374bec856e0064fadc42ea68491530dd0462949ad5ed78ed1b9a89c73b4bfd1e6bd3b7a7bd8218dcf6557db362d6c35e

  • SSDEEP

    12288:E8yf0yrFNqkBdKYN3+xAAgZsltw5bTOt4g0sht8Gj64fPsETEO:E8EfrF7xF+xZwf00shp+dmt

  Score

  10^/10

  lummavidar8ecc9c7eaebfdf2a8cc0586d7419d6eacredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2