Extracted

• • Target

    b4a04a1bf82bd3acb278fd1f1a3216686e465c574bc63a410192c40dec12e2d3N

  • Size

    571KB

  • MD5

    04c2c7a717122dc38042383ec0012100

  • SHA1

    2a6791c8fa407043834e850e96a5b911fd0c4363

  • SHA256

    b4a04a1bf82bd3acb278fd1f1a3216686e465c574bc63a410192c40dec12e2d3

  • SHA512

    e23162c851cb99c37c7595accc8d2f9a7fbd5c08349b081f4d0d3035488ad41e9108c2f195ac58ace941f7d1c36f19f06219a31718dabbea6a7eaa8b14b804f1

  • SSDEEP

    12288:+Lg1ZnYljso4nhYWdMAhUe3kFKwWbdYGzIfP2d9jU4S:+wnYInOWKtehhZY8wqX

  Score

  10^/10

  vidarc0c7c802c4ec94ab4c7fcd88c588698ccredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2