Extracted

• • Target

    78e3ab598b6bf3c5be92c0a3b0f4e541227e64423c8866df23c85b8bf0f4ad28N

  • Size

    580KB

  • MD5

    a9a053db0416c65cfe236f1043f3fc20

  • SHA1

    6a5b6f2de7c9aa3e4379069ba4df16682f36ac35

  • SHA256

    78e3ab598b6bf3c5be92c0a3b0f4e541227e64423c8866df23c85b8bf0f4ad28

  • SHA512

    27f224a74f3ec1d5135422dafc1286649937c13fc307408d6741b27ff376d4ca006f0b9afff10872cf9272183bd22df1d518a2603cbc6b92633a1de968f5c612

  • SSDEEP

    12288:rKvqQnYbvt0yHhdL1nMttynIR/uBlEB5X0gX5xxb+XVbiYErKw:rKRnYjD31Mf/j5XvV+Fbap

  Score

  10^/10

  vidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2