Extracted

• • Target

    text.txt

  • Size

    32B

  • MD5

    a455d48f8584cc5fbe88a099cded5ae4

  • SHA1

    085fc5be40f2edaa6fad96b95b01a6b107745546

  • SHA256

    f77a07b45cd45bfbe85a30f2f30231a1d5d3c2805c865a0d5c7d7e690b7b56c4

  • SHA512

    971a880edbd08c57faa42078097f73867c6cc663bbd3a7c66ba026104cdbe5bd9339596877dbeb277cffca9bac8a52c695f122f4310c4c064b53a65beb41b1c2

  Score

  10^/10

  vidarcredential_accessdefense_evasiondiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Downloads MZ/PE file

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Executes dropped EXE

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1