Extracted

• • Target

    SecuriteInfo.com.Win32.Malware-gen.25942.5770.exe

  • Size

    4.8MB

  • MD5

    9c34d1555408e02bf79d305e14da648f

  • SHA1

    3ade53d77f21861819565b4902d42d17b26b0771

  • SHA256

    81a16262857bdc1497888c2196a6abb068da74a736724f34828b048777560cce

  • SHA512

    be426e3af1d0888cf1b9dd61f01f9010f4f2f83a979acdafb27eae99b21b96e96391ecd73d01f60d087c36adce9538ce8f307bf9660a8b6cf4306e7b6dca1a46

  • SSDEEP

    49152:8Uocec9UxniW/mQU/KgxyPZqsHsehXnMuCtHVZK7umnSZHjew1zdRm8y7PSZp5Jn:84ec9KnirhCWyQegK7B8Cy

  Score

  10^/10

  vidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Downloads MZ/PE file

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2