Extracted

• • Target

    2ffef01bdc9bae49a79e618e8300421e0bb8aa08b2d0c81fbea2b76d12c49375.exe

  • Size

    559KB

  • MD5

    ab42cac4652c80d4884a0647e191fb9b

  • SHA1

    397ccfc27b441e39cdfe1003723cc5bda338162f

  • SHA256

    2ffef01bdc9bae49a79e618e8300421e0bb8aa08b2d0c81fbea2b76d12c49375

  • SHA512

    6b8259b78449e5f5d48fcf5bd1aef04a2de46908127a3ab7aa642aa124f2f1e7290349cdadb1549134cb65a845ae81d43241d20d0a159ba731fa7798e97da03a

  • SSDEEP

    12288:PFdmQisJRpSFxTMiLRNdLomAUt36Fo2vSehEzbiUpQP2EO:z7RoD7RbLAUZ2QG2t

  Score

  10^/10

  vidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2