Extracted

• • Target
    Raze_Private.exe
  • Size 5.6MB
  • SHA256 2d4e8ec435902700a1bc97cf6f5aad79891cbb6b0f3d6582dd9937755f8432d2
  • MD5 a96e35d9d187226f6905dd083e81102d
  • SHA1 6cc29a061d251f317efe73fd5a1e9de33ec231f3
  • SHA512 1d4cf2e79408c9d770d3bfb0706f8607822a899bd8cf3565812b3c87c5a95e1fe92edc7a2202922c57458848633e43480732104a920a364592ebec354476e0bf
  • MD5 SHA1 SHA512

  Score

  10^/10

  vidar1278spywarestealersuricataupx

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • suricata: ET MALWARE Vidar/Arkei/Megumin Stealer Keywords Retrieved

    suricata: ET MALWARE Vidar/Arkei/Megumin Stealer Keywords Retrieved

    suricata

  • suricata: ET MALWARE W32/Agent.OGR!tr.pws Stealer

    suricata: ET MALWARE W32/Agent.OGR!tr.pws Stealer

    suricata

  • Vidar Stealer

    stealer

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2