Extracted

• • Target

    2025-02-23_fcdd5d8bbdd7e9c70b30904c37267bb2_frostygoop_poet-rat_snatch

  • Size

    5.2MB

  • MD5

    fcdd5d8bbdd7e9c70b30904c37267bb2

  • SHA1

    6c8c923851462e0c97b48b3826643eea441ed8b6

  • SHA256

    d9b7cd71505bd423ba63c900c792c585314c44d9515cd2767f6c9826e8237979

  • SHA512

    2ea5167cb7c6f4d87d2e3a595cdd40a2be9e24098841a40c64bf50db9e55f954ae7da0646d9ae10f4e833ba793a94fb304791445c8f9f78197e11ce04af012eb

  • SSDEEP

    49152:8l2I+TsDdNum6TfbV+/74e1HOiiI1qCRzecn5EZ8AoFVWkjDH4P1EKLR1Ic201o7:8YI+T8XqfbVy4IuilzfzHhc2PF

  Score

  10^/10

  vidardiscoverystealercredential_accessspyware

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2