Extracted

• • Target

    55de04a0c8bb1e49015b62988c835b9a_JaffaCakes118

  • Size

    693KB

  • MD5

    55de04a0c8bb1e49015b62988c835b9a

  • SHA1

    6a91271deff3f90359e95cafb722f1d9db7f80f3

  • SHA256

    3114d9a19def58cc62a9b5dbe78360e64772b46e1815c974f318cafb99eedc98

  • SHA512

    f723a33d5e2ba14c45aa30b83887d2f9690266a736f3201cebcdc986b7d4f7a97458f05bbe4eb74e363f964bcb66dad230bc195328493cc387f4733d22f7b11a

  • SSDEEP

    12288:ity5w2s0BhP2PFro43nQMmo4RRNc0g+W2rQeQlAMPGII1RMXF93SVRvVNQxXU:i0TscQPFc8HTWK0g+W2rSGmfCVVVNQxk

  Score

  10^/10

  vidar921discoveryspywarestealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar Stealer

    stealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2