General

  • Target

    1544-1094-0x0000000140000000-0x0000000140046000-memory.dmp

  • Size

    280KB

  • MD5

    1f6b8259fcdd8f01973a0d4975dbd519

  • SHA1

    f7208fa633a2c6537bf124a307708c3ab616674c

  • SHA256

    9f56475f8f6641572e99368b18ebfa2214372fe72c4836057dfa95c5204ac51b

  • SHA512

    fd2cbcbf29632463439d1139e291bae5c6846a2ac98c325f3050a9f327970df820a8653e1a8fd1c3ef8c5c38d4f3b749bee552fc9142f1b243a31a33ee5fd261

  • SSDEEP

    3072:W+Cjrbs4EmTL7U7IJjB+XOHuy3pRxHzZfCgbv1X2Es0VZYTVgaiMpbY:ARKgbdXLyb

Malware Config

Extracted

Family

vipkeylogger

Credentials

Signatures

  • Vipkeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1544-1094-0x0000000140000000-0x0000000140046000-memory.dmp
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections