Extracted

• • Target

    a2c8f7d7fd7981abfdfe8aecdea75fae2b0deba35bada15e36776624738d61e0

  • Size

    571KB

  • MD5

    29cba7bbb44994a2d22a36163c5b1404

  • SHA1

    deb6dda404cae395453a6786651db684dacc37f7

  • SHA256

    a2c8f7d7fd7981abfdfe8aecdea75fae2b0deba35bada15e36776624738d61e0

  • SHA512

    20e83e72f9e890dfeae7268ccb2b3e0146506c5adf696ff7ea13dff12977efd680f4ff9c6e3d4474db9935815516019907bb60112f626e87665d8021de029c42

  • SSDEEP

    12288:VGoEhvQ9zclUMJceboXxK+jjG9Gac8Uq8Sdu/K7OGHJwdH5FcW4S:VwvQ2Yq6y7u/KZ6n+

  Score

  10^/10

  vidar8ecc9c7eaebfdf2a8cc0586d7419d6eacredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2