Extracted

• • Target

    InsstallingFileX64_1.exe

  • Size

    55.2MB

  • MD5

    deae42628027ddba5be9da5d677cab1b

  • SHA1

    258e78c53099ac93d5ccf96bdf4a6cdd7529e3ea

  • SHA256

    0b3ec79d97a2e5edb398768cd1bc525fccca95eea9fbd5fe6ea6acfde3561a7a

  • SHA512

    7b01d4b06f402ed2eef0fb9d16cd32170d16eeb871f48d26cf83e7c3b7803ba8b47d7568a14966c174bfbb1f5224d7ac09d89dfa987230716abc7fa693836cb4

  • SSDEEP

    196608:IVnfEtQ78Kp6OL13ZTsUdXgDzQ7Md4fYATaN5iVWE3lEcmio7PIuGsCdm5kx00Fq:IVnMtQ78xd40Qls7PIxso00

  Score

  10^/10

  vidar93fc6460673f6002db33ceb23a9e1868credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Downloads MZ/PE file

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2

• • Target

    rydg86x.dll

  • Size

    41.0MB

  • MD5

    94ede2f21ef711154e0e3221fa794a06

  • SHA1

    7fbd93f1a91ce7d435e3ee43cd535b07560dc9ee

  • SHA256

    dc2ae16c77466c63f0cc61caecbca5983837cee005213b884bccd8a2a9ed587f

  • SHA512

    68c09124512779ef8c7d0c0fa5f445ac137017d7a0fc05db6e32c580b7d92614d0358ea2d8e9dfbc07479b993bb731b56cd6676de33b04cda78de00f8cc3425b

  • SSDEEP

    196608:n3L3NL80mvor/pVpFnD426B+unfh+J/i9AQgS/6XAv8Mh3M1IcjfDGy2lndzVYSi:n3L3NLC26B8/AvP3MelndzVYcZI

  Score

  3^/10

  discovery
  behavioral3behavioral4