Extracted

• • Target
    Вооstаррег 5.6.2-х64_Lua/BootstrapperAppxx.exe
  • Size 108KB
  • SHA256 2803b74d5466845e4dc9063bd516f3679aa2a3f70a30d9e93976c212e87f6e87
  • MD5 8ce68a756995deb55746dee1525edec3
  • SHA1 10b1d1fc1dc4f11bef3fea1163cf68a88c29d3cf
  • SHA512 f46adf3b92a43b82d0b6ea2652b42a284e25be45909e6c0529440625e7d2867460790778e80864702d56a301e2cb1202006977d8248330a33a4e2212dbbf46d5
  • SSDEEP 3072:rPdGIbRRYJTG8xqR8AaP3ZNKkz8rJYB1osiFAQgD5PxzU:znvuLxqR8Aahz91osEAQMlU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  92fe4a8cd8caee5611511fef4a399499ead1cfdiscoveryvidarspywarestealer

  • Detects Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Vidar family

    vidar

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer
  behavioral1behavioral2
• • Target
    Вооstаррег 5.6.2-х64_Lua/VCRUNTIME140.dll
  • Size 83KB
  • SHA256 2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c
  • MD5 1453290db80241683288f33e6dd5e80e
  • SHA1 29fb9af50458df43ef40bfc8f0f516d0c0a106fd
  • SHA512 4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91
  • SSDEEP 1536:U3qPWvVCMgfw2eeWqjOebgk0jIpePxd76LGYU8j6ecbolG8EB4h88ii0:U66dsFeeBGPj1L6LGY+ecboC/8ip
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral3behavioral4
• • Target
    Вооstаррег 5.6.2-х64_Lua/VCRUNTIME140_1.dll
  • Size 48KB
  • SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
  • MD5 cd1b08f4930b276ad78853580b76b5c6
  • SHA1 a0330279d3d0d47f19ed984726e25260b547a228
  • SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
  • SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral5behavioral6
• • Target
    Вооstаррег 5.6.2-х64_Lua/glib-2.0.dll
  • Size 1.2MB
  • SHA256 29f281e0e9ebc9cc7b54af08535509feac1930a60d3d2e2fe9528f77711f04a8
  • MD5 74801ead5a1402af905efa4ca76fd181
  • SHA1 b08eb2362170048a7b0c08a6339cbf29001fc8c9
  • SHA512 9c6d3c2ea2ec6025da828ed4d5688287f6195ba5f999288655430c09379ecf7165dd26c483620cea703c8db7cc796fc98cfc532904188ae413b910f167e659f3
  • SSDEEP 24576:Ta0mJzYXgexdLNoLpRimUKr+h5gmYFA+NILwVtvM0E:TaThYXgexdMbimUKrrmYFAsSKtv+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral7behavioral8
• • Target
    Вооstаррег 5.6.2-х64_Lua/gmodule-2.0.dll
  • Size 29KB
  • SHA256 ed105b46d3a374db93cc79ce058e897b63dfce9bcc3a27d93ab8f254baeae58a
  • MD5 a45eea5bcdd017b9c4535f5c7daaf2df
  • SHA1 e25337dd0c49784566a4d83f71130a18704dbcb9
  • SHA512 0ce56d630456ca4a91a628ca9729b152dbacc6e2a33b150011715d6a45b8e7512da422d804c13afa4fbd5935e1d42a3efbace43f5c6826c1acf9e053b13f2ab5
  • SSDEEP 384:GXlf1IXxPE2Q+FoFR0dRpDhj3aKuqHuej+IYiBpxaV1VF0hXHMGBk7/UMQ3n:ugOR+6SDhb7uAnYi3YV1VaXLkji
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral10behavioral9
• • Target
    Вооstаррег 5.6.2-х64_Lua/gobject-2.0.dll
  • Size 293KB
  • SHA256 2c76ddda266dbada9597eec8d7559b0669c25f2037344c19b4807e4d61b6dcfe
  • MD5 103bf98f16d5dda06336b3f0f10bb979
  • SHA1 693aea2e2e97ff1c029066aa2440d01b7792c68a
  • SHA512 949638780a315efb8229f01fd9fad365ec5fe393d3d66cd1fe4676224b18e38b6c02347827c9551e23b12e2a742f16aff1762fb942c27f07484d13bd90884695
  • SSDEEP 6144:KazHASmQbLH5T279peOal8JcrL+H+dCnI8XiuPqlcKHXQvUkC:pzHASjH5TG9peH8JcjqikKPF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral11behavioral12
• • Target
    Вооstаррег 5.6.2-х64_Lua/intl.dll
  • Size 3.1MB
  • SHA256 d261636e1e4b839932e3be0cc2adf7f2baa636e9ceef1c6fced3e04684756468
  • MD5 6683b4ea4e20dba1a68f83d5a872e396
  • SHA1 d1abdf08f846e9c18336ff75f9507be2d39df030
  • SHA512 49b7796c08679c0077df66582abed9133d7277e8404079500c0e04a265016d594668c5120efc0f8e6826380dd41067acc6dd5b938d2b7cc5281bfb2029228ace
  • SSDEEP 49152:dBAHWZkN30k5wr+pMRbWzFV15YpfXJldKSTgd8XKr3q23rd:dyVY6zFV1yldKSTQjlrd
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral13behavioral14
• • Target
    Вооstаррег 5.6.2-х64_Lua/locales/resources/app.asar.unpacked/node_modules/btime/binding.node
  • Size 118KB
  • SHA256 98c51303c38dc03faeeba13f26fa3c6645d0c1a502b8a5d28177ce015dacf35f
  • MD5 13a2579ed95366185a6247c9e4b9f0cc
  • SHA1 61fef12da622484e44b3c9ddcd61706c9af00aa0
  • SHA512 7aae5a45f5333355c81e4a7468d40c9d814a1b242c99a39747fea9b66e277dd1060bda290fc980e958beccab2ac0232fc4aba078426ac5ae39c19968ae8f58d0
  • SSDEEP 1536:OMwHUFyUCyB7KdX2teZOpSPtvdO+tYLZI2mAq+J6sWyd09dlgh7tBrdO6t2:hwjUCyB7eC8OpSS+tYLZI5+NMKFdO6t
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral15behavioral16
• • Target
    Вооstаррег 5.6.2-х64_Lua/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node
  • Size 125KB
  • SHA256 149bc3824ecbf68f7a892a311e77548ea156963b88db0590063b50725c9d883c
  • MD5 eeb1d1ea9fc3f870f292161cfa79850d
  • SHA1 ea4f4324245f9f4d6280ef285151f688221d6023
  • SHA512 795269fba2737ca51d61bb0f6e674c8ed45f2590a48d1dbc53adae9a85b5565e372de6e2a888f038660173f6f4fe0ecda293c441415296e79097c261c452f254
  • SSDEEP 3072:cd5+N3E2MosoJCakr0dHPAMMMtrAfz9MrRAG:yIxMQQakr0xPSfzirqG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral17behavioral18
• • Target
    Вооstаррег 5.6.2-х64_Lua/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node
  • Size 118KB
  • SHA256 094bfeb0692885f1e56bb363e1065099eab48a7988c8603fd6a3fb49ec88b09c
  • MD5 6c12c930f974e5bc7872b58964f42359
  • SHA1 805c5c899c32535d2ee8b2bc12deefe5fdaae566
  • SHA512 f46c416e3f33e0526c2d4cb3df738f7c9b11fece350b90ca9613e5d86bae7a363dd20b80d62f5745a9d51773b655199537b09fcf47acf226f35002f39f1596d3
  • SSDEEP 3072:/WKjx2yp1tLqA1HB4kdeRqGmX5EMMi6leGS:3xBPVf1HB4kER4UFhS
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral19behavioral20
• • Target
    Вооstаррег 5.6.2-х64_Lua/pcre.dll
  • Size 402KB
  • SHA256 67332a8c1fa3a2bb449aea74cbcff3c64754fafb09c273ae51bafac91deac340
  • MD5 caa517b0b14ff77ba93fd1cd7d8d7d2a
  • SHA1 4e5122369d4e7386bb29f68d876395ea35b13273
  • SHA512 cc12dfb4ed69cc202d821209fc28506839f37af1d04414f4b1da9b3b5bf43a733a2c73c24d7f2be1bd8244da9eb9b570aef16129c91ea1a788de36106f9ce015
  • SSDEEP 6144:hcfa25CGe2eaYPo6O7lyD+cycOM6BdgWrLNfpui:/aY9O7ePy5dgWrLHui
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral21behavioral22
• • Target
    Вооstаррег 5.6.2-х64_Lua/vmtools.dll
  • Size 867KB
  • SHA256 dbee15d75e4bfc40a0091878009dedf0cca795f224554c91ad776710eb3a76a9
  • MD5 7cf6a1b39eab16a9954386d05e296e62
  • SHA1 07fa47bfeae938638fa7e37bef82f6d15b028349
  • SHA512 2266dfed3ffd8abac71dcff197cc44cfa94be42c1c26ecc4f6531200ee28bdcfede3a1ca2e7329f3adcac1aa98e2081b25c8ed5418789df6ee81b5066b76f939
  • SSDEEP 24576:mjn9BE4lOtZD6/kdhiAMHVDapqhSgIEINmVn/t:mxBE4lO3Zdhi40hSgIEEmVF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral23behavioral24