Extracted

• • Target

    2025-02-14_1f6ee7f536093451e1cfbc38d7505157_frostygoop_poet-rat_snatch

  • Size

    9.1MB

  • MD5

    1f6ee7f536093451e1cfbc38d7505157

  • SHA1

    9a64ed8c51edf93cc56342c58d0888fecc002aa9

  • SHA256

    c0c2c5072513292591df96eff2b74ddfe0288cc93ec6fae6773998dc264dd7a7

  • SHA512

    7c3d5e616405d8d7f12f3abd5c469b2172114b5872e7b18bd767b37e1503b0471b7a09d60989905adf5a56d51e3cd2b350c2c93efb167061b84850fe38f93a6a

  • SSDEEP

    49152:6aqM53aWT0fRUfvnVsK9PGOmVEoTW4gJcJKDYIum3ptXR3fY4aJYABEGqzH1IlDs:6aqM5KdZInVvCLTWaKlY6H991

  Score

  10^/10

  vidarcredential_accessdiscoverystealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Downloads MZ/PE file

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2