• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Known Vidar Stealer Samples (v2.0-v3.4) SHA256 Hash Match

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Ibrahim Saud@tektrix
    •updated Sep 22, 2026•0•0•2

    Detects the presence of known Vidar Stealer malware binaries (internal build versions 2.0 through 3.4) by matching their SHA256 file hashes. Vidar is an infostealer malware typically used to exfiltrate sensitive data from victim systems.

    YARA

    Tags

    T1204.002 - Malicious FileTA0002 - ExecutionFile Executable DetectedMalware DetectedWindowsWindows Defender Av

    Found in

    • Vidar Stealer Evolution: Virtual Machines and Custom CiphersLast updated Sep 22, 2026
    • Vidar Stealer Evolution: Virtual Machines and Custom CiphersLast updated Sep 22, 2026
    • Vidar Stealer Evolution: Virtual Machines and Custom CiphersLast updated Sep 22, 2026
    • Vidar Stealer Evolution: Virtual Machines and Custom CiphersLast updated Sep 22, 2026
    • Vidar Stealer Evolution: Virtual Machines and Custom CiphersLast updated Sep 22, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?