Extracted

• • Target

    bfcf93a05e1c1ca538128072013bb7c87a54ea74b4f103e2de4b5960dc89d3c9N

  • Size

    571KB

  • MD5

    9542f8ffd8eec05f4284824d1d9bd6c0

  • SHA1

    919903a146074b9211d56e26866ac17a9dfc2137

  • SHA256

    bfcf93a05e1c1ca538128072013bb7c87a54ea74b4f103e2de4b5960dc89d3c9

  • SHA512

    2fb90491d40f797063a0da5a43e33efc8e3f01fb6648214f8861422a459900e425cbf97ffae36ffbd14acbb272bbcc2cd425370419160252347bbc5f49860e6e

  • SSDEEP

    12288:XcEcpXoWDMUP1Rt93TJcCjpPYF+h9bYWxbVLbrhycb72PgN/4S:XOXo0VTJPYF+jbYepnlyK7+gNA

  Score

  10^/10

  vidar4a5bc8b73e12425adc3c399da8136891credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2