Extracted

• • Target

    50c6f81caeb1d10861cc18552340a8bacd440a6777d900c00d5bef3d8d402b1fN

  • Size

    571KB

  • MD5

    d8c606667fe056fd17cccca3b319e760

  • SHA1

    9a996332fb06038e09771899bc3b604a4f5ee7b9

  • SHA256

    50c6f81caeb1d10861cc18552340a8bacd440a6777d900c00d5bef3d8d402b1f

  • SHA512

    b8c9a55abe7ae19ed3447a9e6a478dee830cf0e21befc8571ef367bb48312faadef0c8309dcf1a7a0f292e025f6132617b62096a05f6f14fd014c6a63d52d9a8

  • SSDEEP

    12288:sls0xfgBSzcJfiz90LpIH5tQngft0e48iexACrmoLd2ihom/I4S:sHfgY0Lp8Kg748HAzBiNJ

  Score

  10^/10

  vidar5d5c21db908d8fe19952873f9f748174credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2