Extracted

• • Target

    652e3aa6257d354fc3f8093a65757557941ee488b6b7e4a3ac85662208f6d465N

  • Size

    571KB

  • MD5

    0b237f48744e67912ad1fb95aafaa3d0

  • SHA1

    9ee0b6e8d6f81a26493a0f97018c0b1b4b74652a

  • SHA256

    652e3aa6257d354fc3f8093a65757557941ee488b6b7e4a3ac85662208f6d465

  • SHA512

    feb3820bbcd889ea7c3dc7561aabb2f5f19f2e31273e0e06926e51aa8ba59d148260d7681700a144ae299411706e99461b1671f06b1f725ca11da8e903734df3

  • SSDEEP

    12288:qpoEhvQ9zc7oU/V5NLFga2/cdQaX99j16C1JtL9LwZ6BDypu5TL+6a4S:qXvQQ5/24X1vvthy6BGpuY67

  Score

  10^/10

  vidar4a5bc8b73e12425adc3c399da8136891credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2