Extracted

• • Target

    a86c7b65a6348d392d10d3982b6d0b896fdf646b218903a012d3c0dd73159f5b.exe

  • Size

    571KB

  • MD5

    8351aa212d7278c381ebe13f2a435ad9

  • SHA1

    d529652f0ba92febad36c66a1b5be4398eddaef2

  • SHA256

    a86c7b65a6348d392d10d3982b6d0b896fdf646b218903a012d3c0dd73159f5b

  • SHA512

    8ac16c1c659da3562a1b6c7b6a8999da49420d0860e18f601ce6ae737113c82b074b1a724db3b807b41da04f0fbbdfdecb8d42856f72cb0a1732a4dfbfbc2e47

  • SSDEEP

    12288:fls0xfgBSzcsLJPVB1DrYoLRn/4CAkJwh9Jb6OYDU3zHCf4S:fHfgeDPMoLRwCAY06S39

  Score

  10^/10

  vidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2