Extracted

• • Target

    2b9dc49a20ada5b22a2e20d3f06a44064c4f42dda488a87dfc43e5736e458629

  • Size

    598KB

  • MD5

    31ad13263ca76bcba09056b5d4315267

  • SHA1

    f42c24d7ef558f3021ac1f7b1321ae66b7e4a465

  • SHA256

    2b9dc49a20ada5b22a2e20d3f06a44064c4f42dda488a87dfc43e5736e458629

  • SHA512

    490b5ababf142a62c1d6d8ae24708d906de8971d04f77d24a0d2e35be5d921b22d4b5d16c83dff49febab303e2f8308626e14d26c7d2665c8550df7f19de7d5b

  • SSDEEP

    12288:12n70T7l4SZnbKq412NOxPMi1Ta8g09y5jYJiqF90j7M//z64fEETEO:127O7lrnbKq22cvnWjC9tOFmt

  Score

  10^/10

  vidarc0c7c802c4ec94ab4c7fcd88c588698ccredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2