Extracted

• • Target

    25f720e9b969bdbece357a4704d4575a47ab8230affefbc2bfc467cb317835f1.exe

  • Size

    580KB

  • MD5

    e92d327838d5f6952f612283a2425e24

  • SHA1

    60c73cd8fb4f10628072f055770b472bb47db22f

  • SHA256

    25f720e9b969bdbece357a4704d4575a47ab8230affefbc2bfc467cb317835f1

  • SHA512

    5fb955197e5c18e91e6da9f12390a6cfc52317ef3905c4ed8a69b0b42d75588c69435cfa2bcebef3a9d40d6e95d7299935cf731cf2bde59d264fa9da5dabe462

  • SSDEEP

    12288:+KjyIfgXP6uLj9n9SAz0ciC03e2FcyPvIdbDDhaqfnGidrKh:+Klfgfzn8AzqCONFXPv8DdrDY

  Score

  10^/10

  vidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2