Extracted

• • Target

    NеwIns.rar

  • Size

    65.4MB

  • MD5

    0cb086002283c129a5d7fb74e4dd8cce

  • SHA1

    0f45f5b2001c92b72ce7ad1b374a213c64e6b2a5

  • SHA256

    8567ec919ec83bc38b0a2571acdb62fffbe4f6d6e5384e4968df6d2087d0bf7f

  • SHA512

    2a9e212e0b60881e20f5e54c7337837777defc2905ea977fe1a5f14cd07eab3cb83586612d427199e7ee8f522038d62ef57c2ac470501840e1d92083dc6fd01b

  • SSDEEP

    1572864:zoe9+W67M7lM1Wv9wi1ned93iV6vDX4SDsEGsaXucGtjYxoZ:Ue92pMT1ed9yV6vDdDstFecgWoZ

  Score

  10^/10

  vidarcredential_accessdiscoverystealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Downloads MZ/PE file

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1