Extracted

• • Target

    InstaIIer.exe

  • Size

    41.0MB

  • MD5

    136d8eeb91c5fa33ff2049b441929788

  • SHA1

    58c0e21ec68c7c499b442c8ec2e820adf1fd15ec

  • SHA256

    5667a73898a9134a736c6b56f25577ed3f9901dd17439de0dca545ac3cd1af16

  • SHA512

    d55552584088455d96656d3ac7b33195cbf0eb511bec47da66f37ff5874fb489d69fa0eb9e1cccb3bdb431ceee835c2cb62833f420a8efcec4ee44439090a1fa

  • SSDEEP

    24576:5z0wSWUTxMWv3LPO9dOV8kS8FTVuFK76/KvHM:5z0wSWUTxM2PO9wV8kS8FTV5n

  Score

  10^/10

  vidar832ff6075d875436124f2744cc55913acredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Downloads MZ/PE file

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2

• • Target

    re86x.dll

  • Size

    177.8MB

  • MD5

    a17f011e58699c816cb3511fc14a5e3d

  • SHA1

    4a69475a7d523239f61d2fca759c35776d256eb0

  • SHA256

    be3283d6c64766a6d950a93f42164e82f93d30409697a693a7a6d8759935abdd

  • SHA512

    c5d1864bae174a523bc52026107f05de00f64401ea1a0bd037ea4eedba9abcace1e17381b3f33ced4e7ee8d54bba1b9b184750883c3a2a9feacf1dcb8ad62157

  • SSDEEP

    24576:VJ1jpSL+6UfDq80kdLx5IyYIfNvLw94Sx7aPuIaWutQrXttq89PZV53rnN7rjRLT:P1jpKNUfDq80kdDIyYIxa4Sx7aP

  Score

  3^/10

  discovery
  behavioral3behavioral4