Extracted

• • Target

    Set-up.exe.v

  • Size

    6.0MB

  • MD5

    7a0fd3bde42dfda339a0178586081838

  • SHA1

    eae2a7c95550399aad314f4e5513cd08baeba830

  • SHA256

    19611d5581709448eb23961048caa859c42acfffea8e2914c747a41623065bc7

  • SHA512

    23f31cc45fc9329edfb06e64956d4f20929110017a0d66aeac7d53e76a1a7e882fd6891841ce473aa1ae93cda92e5aa1dbf1ffada53d0c319c8d7c29db45e3bf

  • SSDEEP

    98304:BzBHzTgecsYM4BFL4zAFy3AUCbw1jYGFGOWnWKuOkT8yrlm/flRi1Ek+JiOjo:B9AeF54BK3NiKjY3pyxm/u1E

  Score

  10^/10

  vidarbed60e7985fadd893545d14f20bd7015credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2