Extracted

• • Target

    Set-up.exe

  • Size

    783.3MB

  • MD5

    84786aa8d74cf20057745a525b8c4b02

  • SHA1

    6f10a5fd181a40c7513b7aa24de325c6526160c5

  • SHA256

    76bf839d015ba153e7500d158cad90f76c2796185170986df83210a3d3cd30f2

  • SHA512

    2a68353cf0c46bc568f782879792538864982f2ad44b46dd8d65efde5d21c2418cca810db19abc879814e8fccadc0144d72cff2184f7073c648d4f4ff5107d24

  • SSDEEP

    98304:BzBHzTgecsYM4BFL4zAFy3AUCbw1jYGFGOWnWKuOkT8yrlm/flRi1Ek+JiOjoOcx:B9AeF54BK3NiKjY3pyxm/u1EK

  Score

  10^/10

  vidarbed60e7985fadd893545d14f20bd7015credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2