Extracted

• • Target

    669520f903f4178a0b5365327369eab98a3e595dddcf1164324beeae8fca8b0cN

  • Size

    571KB

  • MD5

    67bde3658a9ffcf47a6103eb6df9c660

  • SHA1

    f527e481e7644a0d4b31af37d34226ccd8621ce8

  • SHA256

    669520f903f4178a0b5365327369eab98a3e595dddcf1164324beeae8fca8b0c

  • SHA512

    5ec51c39d9f652d3c2e719ed0b4f8ccb39c05b197b9a4fb7bb772743ea7fcffca5ac6ca4966341e012eeddfe12a3104743dbe5849c1c7cdd73001129648177da

  • SSDEEP

    12288:sGWivJ6LrcfSvaiNxA6fl95WCtobUz0Gcj/a4Sl:smJ6RvaMN++0GcL7O

  Score

  10^/10

  vidar04a7a73c13ab56b51bd29415d6338a92credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2