Extracted

• • Target

    l.exe

  • Size

    421KB

  • MD5

    17190c7e5163b5c115e3d470f568ee5f

  • SHA1

    ee6050772ea885be7b2acce367b40152227494fa

  • SHA256

    e2ff85bf7223c5da15d49475d18c030080de308af569311b4cbafced24397ec9

  • SHA512

    31b389532d2e83456a2e61c1d580f146efae5b7162f8d5849e69d0f48622cb69afd87a2eaed8152af5e2852b2144352acfc0eaa97d11d935218c2df7c70004bf

  • SSDEEP

    6144:4JbYfCQKpUaHkyblEM0rnDstcla2VsCNaveUfhOwkzknkuHBsIzdqnfbWyoe7u/n:pJMJCbWsmkuHBsIvHd

  Score

  10^/10

  discoveryvidarstealer

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Suspicious use of SetThreadContext

  behavioral1behavioral2