Extracted

Extracted

• • Target

    3e9bcffa53eaeed8668e7908a9a85b3c2a67608f7c3a1ceba896a8a1f45add76.exe

  • Size

    571KB

  • MD5

    1ea9e6542ab9990ae4a578c799e185ae

  • SHA1

    fbf88d5a63b8681e6ad99ed2352d7cb5c3b5af9d

  • SHA256

    3e9bcffa53eaeed8668e7908a9a85b3c2a67608f7c3a1ceba896a8a1f45add76

  • SHA512

    386fe388da5dfeba729262f2cc5d1e3dd2c5d871433c94ff4dc4637030f9c916872976578c32f1c2fa6810e35085fbf17a5fcda2a6919a7e9cd319fab6ce1ee9

  • SSDEEP

    12288:ULg1ZnYljsg9y2m5kuQHN08Wo8dtA9z1mlMyDRYP/4S:UwnYV25P8Wo8d+x746PA

  Score

  10^/10

  lummavidar4a5bc8b73e12425adc3c399da8136891credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2