Extracted

• • Target

    2025-02-25_4a957a425a066ef75f5ccbb78e56fc30_frostygoop_poet-rat_snatch

  • Size

    5.1MB

  • MD5

    4a957a425a066ef75f5ccbb78e56fc30

  • SHA1

    144e793b967d7925f5d91e0a3928ff0fc4e3718a

  • SHA256

    71c959f416dce380b98fad8f4f9d5c3dccf44b310ec05321dc17c35603da303f

  • SHA512

    6f563ce565f2ab3cc59c9caae1c9a9bca0a59055983ba220dd80f007f557407d2aea58bc9d14e0e16c8a07934a41cad2dd87ac43783c1db35fd518b1274c22d9

  • SSDEEP

    49152:UvzMb1W+znU3Fxo3Gpw499PDXeJtnFd5LYDW1wl0SmZ+Vy31Sf6x17qY1:UvzMBIjo3qj7PqFBheO

  Score

  10^/10

  vidarcredential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2