Extracted

• • Target

    0395499033d792c7274898ef9d023142bf2f1b7095614c2b9f1852eb2cc97934

  • Size

    598KB

  • MD5

    9b16f72b049abf7c69cc071e2ea9d72c

  • SHA1

    85f21bb8a99e7f3f482f624464fe20d83b39741c

  • SHA256

    0395499033d792c7274898ef9d023142bf2f1b7095614c2b9f1852eb2cc97934

  • SHA512

    c1db01aaaa0989b6dddb21dbef106903a708119988ca0b74777eff29a6d72efac8462ea22eddd8477cc5b7c9abb6f589cb14f8ef5b2f8a17f8b660fff25f7c76

  • SSDEEP

    12288:2MmEES7ltqraZUBR4IZbHj8XYhOlMR5vMmXhwRHr3z4wb9B64fEETEO:2M7P7ld/4H8iOlMRxrSHLNYlmt

  Score

  10^/10

  vidar4a5bc8b73e12425adc3c399da8136891credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2