Extracted

Extracted

• • Target
    need for speed hot pursuit limited edition serial keygen.exe
  • Size 863.9MB
  • SHA256 3fc816ea2ef66937e3c57f0a0196a2248ad3cccfbc22f693fa7bc4543d37a841
  • MD5 1d9259346e753743b72cc442c41e3e10
  • SHA1 fa158a69afd7dc83a23bfcac3932024e7ac1a7d9
  • SHA512 d7e1de52a12acd5ed631b74b72715c3a230dc89a4bd7cebb89df52a45a0ee56c8c31b37a2c40a04aad4bdb436e7eaed62cb3fb9248f149ceb8985e4b4fdaabc2
  • SSDEEP 393216:EefbYGTlRWkcUILP4ptXvOk0WSEwhp2+z8RExwYUpSCKA:EefMyWHU6P4vXWk/3w7Ud
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  pressfstealcstealer3cba7d4634e0824669438afe97b73f93discoveryvidarspyware

  • Detects Vidar Stealer

    stealer

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar
  • Custom signature

    Vidar 2.0

    Vidar is an infostealer based on Arkei stealer.

    stealer

  • Vidar family

    vidar

  • Executes dropped EXE

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2