Extracted

• • Target

    libcares-2.dll

  • Size

    4.3MB

  • MD5

    93fb1d866472e1280e4a93343db3ed13

  • SHA1

    fcc4cbab5f13bfbcac6b7610309ca6c3bdbd58ac

  • SHA256

    089da3c21bdd12618e7d5f757d1742a48dc961b367a8515703c94d9febc965c9

  • SHA512

    79d49f319ab38945714b59c071ee61888135326718ffb91c333806c31f8b36b108ca121884366092aee4fbc2991af16fc4eb811c25a66590911d0493d028448e

  • SSDEEP

    49152:TO4Yher6KfKDd0faVjaNpYzooELJJC4L0357+LnT3ODeJaYxdVIwG4HK0VglLa3N:TVrDQhzooyrnRvOqx9

  Score

  10^/10

  vidareb17a39311b2fbc653bb6a88c15634e4credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Uses browser remote debugging

    Can be used control the browser and steal sensitive information such as credentials and session cookies.

    credential_accessstealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2