Extracted

• • Target

    53c454d3daba412d544f91eddec97c12c12f0b16aa1aa1595527be78210fbfcf.exe

  • Size

    598KB

  • MD5

    af5bfaa4908459155ade24245aab4a1b

  • SHA1

    9d816d1d533e0b29e3765a1c5b8aba8de69e2f0b

  • SHA256

    53c454d3daba412d544f91eddec97c12c12f0b16aa1aa1595527be78210fbfcf

  • SHA512

    c4e51850a87d26253c81673021a79d5292344ad6e7b02c92fd65bb04d9832d18522083137b7e662779a7043bcfd39a879e16f7acbd2797a0f85993178fad76cd

  • SSDEEP

    12288:dMmEES7ltqomDzkCeg3cOZG7/hHijTt9qhRuhUiMpwFDZ64fEETEO:dM7P7l6eQl9+Rn+klmt

  Score

  10^/10

  vidar8ecc9c7eaebfdf2a8cc0586d7419d6eacredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2