Extracted

• • Target

    d1f0a32bc21c51251a719d8b3055ba4102d89dcffdf3b200d635b89dd9b7f551N

  • Size

    598KB

  • MD5

    61ea971f6fc8eb04408b85fc96b54580

  • SHA1

    f561bfab234c00a9245eb26f2536129746a5f076

  • SHA256

    d1f0a32bc21c51251a719d8b3055ba4102d89dcffdf3b200d635b89dd9b7f551

  • SHA512

    e13175be9ddc74e33ec4cffb84f7a532632d433c88d57b02eae3e3aa617baeeed91a547dec39ca3b5059d3d5e598e87e13c29cba54770540abadeb2c0a274271

  • SSDEEP

    12288:gUOvMSDFMq/YQS/wtkVNlA1pRBTBWISlS3n7k20P13Cj8iA64fuETEO:gU4HDFo/otkVNlA1pRhBWIASLZ43CIE6

  Score

  10^/10

  vidar8ecc9c7eaebfdf2a8cc0586d7419d6eacredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2