Extracted

• • Target

    5ec59aa04eaeca96a6821f4d2455016eed3af2df0f468fa6eb6bc4791d52406bN

  • Size

    580KB

  • MD5

    01b19268a4584b8a4cdd895fa7976fa0

  • SHA1

    87b51348c523e5dcd06a761cda45066910911176

  • SHA256

    5ec59aa04eaeca96a6821f4d2455016eed3af2df0f468fa6eb6bc4791d52406b

  • SHA512

    2d5a607ff9f8ffd7270a15abf09264b89ee86b03678ca2de584eece166fa49edb7198fbcd9d9dfd586427b454ee84f040dd16f1c9c208d572ffd07f9b8bef9b2

  • SSDEEP

    12288:SKHCYvQ2v9Zy6ABClNjbEqPaDfXM9dSarbGRoYv7eFBiq3RMrKA:SKZvQakwH01+Sarqom7e7iqhy5

  Score

  10^/10

  vidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2