Extracted

• • Target

    072ad2a51c4cb53e71d7b0ed455503f8f9a0ae233cb7e52a59b1c4e899f70617.exe

  • Size

    571KB

  • MD5

    7f7532b84fb132083db98ad681bec486

  • SHA1

    b07368d9b509e2c100960c6a496c78ebb6821dfc

  • SHA256

    072ad2a51c4cb53e71d7b0ed455503f8f9a0ae233cb7e52a59b1c4e899f70617

  • SHA512

    951f290cbe3ea998001cebf9875a881f3695c3f7b46904cf1fdc8c9653071e1f7f57dec0730ceaeee2536b2dd93fe47dfbe13e861727a6c089dc67fd4392c1a7

  • SSDEEP

    12288:jByivJ6LrcsUWG/97HTnZPdx7EsRQ+cJ3F/JXyiqBcw+4S:jhJ6nc97bTxQ+cJLXyLBd

  Score

  10^/10

  vidard206c6aab5f4bd2208ca601fe157f31bcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2