Extracted

• • Target

    lem.exe

  • Size

    1.0MB

  • MD5

    7723d62c8a6c95004f746afa54e8460b

  • SHA1

    01dff9bfe0bbb49ce51e611cbb9233d74ba1a596

  • SHA256

    d80007837ee60fe9537c76e6a3d45005a86ddc3e066e608b57e1d4430cb96df4

  • SHA512

    b55fef5246a4ada84a799e9e3ae6026ecc47566bf6150c3377d9dad743ff7f0c5a17759d0c1a121e4d530dae9ad60db0d21168d0180bcd63c6160f5927e84fcd

  • SSDEEP

    24576:s7wiALdYAa0xGv7L0TDQUjHA90zWy64aL/MxED:cIuAaoTkU0x1L5

  Score

  10^/10

  vidardiscoverystealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2