Extracted

• • Target

    us.exe

  • Size

    6.6MB

  • MD5

    47ef73872d8adbb3f66c4d0b145060bf

  • SHA1

    f2dde0526a50623daecaaa969f77204d46894e32

  • SHA256

    4fc13c81b5594dd189eafc3e88fd6d5cadf8f951b81d10fb2ffab3c851512771

  • SHA512

    274ee436cb704002581eb3551f676e9c8f7015ea75ca090f6b783d9fd7d9b7c7be4dd86fd4024f0877658a464653e6c738f77fcda150221c8a88f276be987687

  • SSDEEP

    49152:PJiTLxmrxMgiQNXf34SF0VwUhu6NqQFn8vca9Ypyy7KQ+cKa/Et9m3OnytR1ljyc:P0TLxmFkQNXgU0ZqXHfaj3OQjy

  Score

  10^/10

  vidarcredential_accessdiscoverystealerspyware

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Downloads MZ/PE file

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2behavioral3