Extracted

• • Target

    05e2f2be2a3eb1e55bec028aca88ef21f8b5e821fa4ecdbcadee6175b2ccf13eN

  • Size

    580KB

  • MD5

    f953c564ad08143fd810c509f1226090

  • SHA1

    333b1d45e7696e6e06330f31a909ed54a5798a29

  • SHA256

    05e2f2be2a3eb1e55bec028aca88ef21f8b5e821fa4ecdbcadee6175b2ccf13e

  • SHA512

    2020336b0a3b70dd35740ee834cfa31a056cc602f20d647bcb031f2806cdd2518aba83c2df266a949e2a9549bd994f25659c719eae218ec34c569b84a2606722

  • SSDEEP

    12288:DKHCYvQ2v9wTcWux2Ev0O93ZbjoxE2i2lr4TkYwjDrKA:DKZvQaecnE9O931U3bhYwjH5

  Score

  10^/10

  vidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2