Extracted

• • Target

    Solara.exe

  • Size

    11.5MB

  • MD5

    3e1edf981ca6e7939d6e31ae70734240

  • SHA1

    76b5698a31314c433b73e89e1800cc1bc6b8a00c

  • SHA256

    b0d99638f89532528b1c77662303d51cea8f09cb4cd6440fd01f5128b5ecaeb2

  • SHA512

    781c84789e8de1a1655f40f4996057c42e662284967daf49a826a617feb0a5c53cd8d431ce8b669befe538b79e0f3ac615f44172fe0bcbc2817c244dd9f8fdbb

  • SSDEEP

    98304:/PT0ghip3+ZnMxQ2YMMwdN4u2Xkc14GJmzmBZJZPtT5AbUtVRQt+QT2vaF5r9Y:/I9VkQrN4u2X42m0JZlD2gvay

  Score

  10^/10

  vidardiscoverystealer

  • Detect Vidar Stealer

    stealer

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Suspicious use of SetThreadContext

  behavioral1