Extracted

• • Target

    2025-02-13_7de3106bf80053132e35d123cca2eb8b_frostygoop_poet-rat_snatch

  • Size

    5.0MB

  • MD5

    7de3106bf80053132e35d123cca2eb8b

  • SHA1

    4d699b2c5f24af383e4cf09db72814c86e84879f

  • SHA256

    f85233c2e5336f961070529581d6f1a2557435ec7c11ccabb708321c2419d1b2

  • SHA512

    55b1e7ed15f611cd0f3664d7fd58161c1869f7da040ba4f89df9af12c7a96454a5624db445a5ce34d8add6c7daa2adc5b9e13d1c8bc6357e6cfb6ef5c5e1b453

  • SSDEEP

    49152:aEjRNxxJ4r2qNRN6CTe1pkdKdbEtfuIwvXSTA1Ea7gdhQSvl45Nf63u713i:/FNfJwrRN6CTQp2KNPSbal

  Score

  10^/10

  vidarcredential_accessdiscoverystealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Downloads MZ/PE file

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2