Extracted

• • Target

    18f5f368c18b9988c7d66abb169d54029cb6316910b109f3e3a4dbcc37a5b59c.exe

  • Size

    383KB

  • MD5

    8cf13135a7e323db19dc9d625d4d8702

  • SHA1

    1c4608206be37d2de204e385a2add9f378774cfa

  • SHA256

    18f5f368c18b9988c7d66abb169d54029cb6316910b109f3e3a4dbcc37a5b59c

  • SHA512

    5e8024de8683db901c47a86322782402f2092120ff8b9a6edb61c92837003ce8a20a9dc504ca52197d55498aea992138b87fd00850b92db1c80bd249e9f643c0

  • SSDEEP

    6144:hGO+83+N11n5au8LvOWjTMZG6wn+K8ekx0wKYHMCsHW+S0ZaaPG:hGOv3+N11n5ALvpjTACn+xek0VYExdZa

  Score

  10^/10

  vidar4fb976350439be886a8f60326d57d314credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2