Extracted

• • Target

    9114673029dbad6c77412250deb7679c9b307f775179296e8cd712a235dd1666N

  • Size

    580KB

  • MD5

    323ab362b672d56ec0a6bce72b73b5e0

  • SHA1

    ac1e63410f933f9c8fe496b6ab5d3cdda24b210b

  • SHA256

    9114673029dbad6c77412250deb7679c9b307f775179296e8cd712a235dd1666

  • SHA512

    c37076a1a7cd4ad672d181af88c63d57d392f9488e0868358b7ac53c0b9f97fef122112492c2c57dc03f796b0fda6e58252b7312736e8c907f4f55b8b5d35552

  • SSDEEP

    12288:EKHCYvQ2v9CzBM4pUFo3NGkEkJCMqjy0rqqoxQLlaQrKA:EKZvQaKBIFoak8jy0rqqkQYm5

  Score

  10^/10

  vidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2