Extracted

• • Target
    FPS Boost V4.exe
  • Size 3.3MB
  • SHA256 0945e92ef819ba1f2ddf29c7838965e5dacca96795e447888b6ff12af87cc0b2
  • MD5 942c0070e2048f52987b75b3a8d819d7
  • SHA1 e50e40fd8416a04ce3761704fd850af602f11e85
  • SHA512 9e59d22050b0779ae16fe3dfa36922f82045e5423ccab9ce3d7b4e1d01296ab5581aa31d4e35b8aa4a8ee9cf988ee6b3fc760282c36ed0d10a2677a9714190dd
  • SSDEEP 49152:3Xzsuwf/n+LDeI/LQvWflIWAk9ArrC5YsJu0Yjmv:3aOfzArr0tp
  • TLSH
    T105F58C07BDA048E9C0AEE6318877529A3B75BC490B3227D72F50B6382F767D06C75B58
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  9df9162ec766659114c10b95b81ffd6adefense_evasiondiscoveryvidarnetworkstealer

  • Family: Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Detects references to legitimate web services potentially used as dead drop resolvers

    Detects Telegram, Steam, and other legitimate web-service references that may be used to retrieve secondary C2 infrastructure.

    network

  • Suspicious use of NtSetInformationThreadHideFromDebugger

    defense_evasion
  behavioral1behavioral2