corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0877a-a477-7199-93ce-d000aacec7bc

Let’s dig into Vidar – An Arkei Copycat/Forked Stealer (In-depth analysis)

fumik0.com · published 24 December 2018

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at fumik0.com Wayback capture
1blogs citing
First cited
19 Mar 2026
Most recent
19 Mar 2026
Rank this month
not ranked
Links from this post
52
Words captured
5,770

Cited by

Blog
In the post
Date
Red Canary
Intelligence Insights: March 2026 Read at the source ↗
19 Mar 2026

Links from this post

Link
Host
https://docs.microsoft.com/en-us/windows/desktop/api/winnls/nf-winnls-getuserdefaultlocalename
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winbase/nf-winbase-getcurrenthwprofilea
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winbase/ns-winbase-taghw_profile_infoa
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winreg/nf-winreg-regopenkeyexa
docs.microsoft.com
https://msdn.microsoft.com/en-us/library/windows/desktop/aa379358(v=vs.85
msdn.microsoft.com
https://github.com/Fmk0/scripts/blob/master/izanami.py
github.com
Predator The Thief: In-depth analysis (v2.3.5) Read at the source ↗
fumik0.com
https://docs.microsoft.com/en-us/windows/desktop/api/fileapi/nf-fileapi-getdrivetypea
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/gdiplusinit/nf-gdiplusinit-gdiplusstartup
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winuser/nf-winuser-getsystemmetrics
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/sysinfoapi/nf-sysinfoapi-getsystemtimeasfiletime
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/psapi/nf-psapi-getmodulefilenameexa
docs.microsoft.com
https://docs.microsoft.com/fr-fr/windows/desktop/WinProg64/running-32-bit-applications
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/wow64apiset/nf-wow64apiset-iswow64process
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winbase/nf-winbase-getcomputernamea
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winbase/nf-winbase-getusernamea
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/wingdi/nf-wingdi-createdca
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/wingdi/nf-wingdi-getdevicecaps
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winuser/nf-winuser-getkeyboardlayoutlist
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winnls/nf-winnls-getlocaleinfoa
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/timezoneapi/nf-timezoneapi-tzspecificlocaltimetosystemtime
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/sysinfoapi/ns-sysinfoapi-_system_info
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/sysinfoapi/nf-sysinfoapi-globalmemorystatusex
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winuser/nf-winuser-enumdisplaydevicesa
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/tlhelp32/nf-tlhelp32-createtoolhelp32snapshot
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/tlhelp32/nf-tlhelp32-process32first
docs.microsoft.com
https://docs.microsoft.com/fr-fr/windows/desktop/api/tlhelp32/ns-tlhelp32-tagprocessentry32
docs.microsoft.com
https://app.any.run/tasks/b439a1fd-fb62-4451-b9d4-d4a4597e3dfd
app.any.run
https://docs.microsoft.com/en-us/windows/desktop/api/fileapi/nf-fileapi-createfilea
docs.microsoft.com
https://en.wikipedia.org/wiki/Process_identifier
en.wikipedia.org
https://docs.microsoft.com/en-us/windows/desktop/api/processthreadsapi/nf-processthreadsapi-getcurrentprocessid
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/processthreadsapi/nf-processthreadsapi-openprocess
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/psapi/nf-psapi-getmodulebasenamea
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/shellapi/nf-shellapi-shellexecutea
docs.microsoft.com
https://github.com/Fmk0/work/tree/master/Vidar
github.com
https://twitter.com/siri_urz
twitter.com
https://twitter.com/benkow_
twitter.com
https://attack.mitre.org/techniques/T1082
attack.mitre.org
https://attack.mitre.org/techniques/T1124
attack.mitre.org
https://attack.mitre.org/techniques/T1012
attack.mitre.org
https://attack.mitre.org/techniques/T1057/
attack.mitre.org
https://attack.mitre.org/techniques/T1059
attack.mitre.org
https://attack.mitre.org/techniques/T1129
attack.mitre.org
https://attack.mitre.org/techniques/T1081
attack.mitre.org
https://attack.mitre.org/techniques/T1113
attack.mitre.org
https://attack.mitre.org/techniques/T1025
attack.mitre.org
https://attack.mitre.org/techniques/T1005/
attack.mitre.org
https://attack.mitre.org/techniques/T1002
attack.mitre.org
https://msdn.microsoft.com/en-us/library/cc233968.aspx
msdn.microsoft.com
http://www.lingoes.net/en/translator/langcode.htm
lingoes.net
https://docs.microsoft.com/fr-fr/windows/desktop/Intl/locale-names
docs.microsoft.com
https://docs.microsoft.com/fr-fr/windows/desktop/Intl/locales-and-languages
docs.microsoft.com