Overview

overview

7

Static

static

3

VipKEYLOGGERVIURS.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    1s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    28/08/2024, 20:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    VipKEYLOGGERVIURS.exe

  • Size

    8.4MB

  • MD5

    3206ab4fd589c0dfae8b682ab0fbaba2

  • SHA1

    567a0321507b71e66cc62ffdfc4f4dbd8ddf7e74

  • SHA256

    3937411715484a9d048125da6a5c3322f4ed39b6e4b50c2de320a5d16415ba0f

  • SHA512

    4f5f4ef8f586f36fab27ee1b464ce51b1a2e6eb7d2711d0827f66d36f2a09cb7796f0210966776df32539fa53d4967539c6de8eab4e6fab787f31d70cfbd63cd

  • SSDEEP

    196608:+iaGV2ukBvRBA1HeT39IigwRTet4Q4G/NsI6yzWFD5MYdoxZ+:mGV2ZJq1+TtIiFRS1NsIZzWFdJoT

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 19 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VipKEYLOGGERVIURS.exe
    "C:\Users\Admin\AppData\Local\Temp\VipKEYLOGGERVIURS.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2528
    • C:\Users\Admin\AppData\Local\Temp\VipKEYLOGGERVIURS.exe
      "C:\Users\Admin\AppData\Local\Temp\VipKEYLOGGERVIURS.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:3624

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\VCRUNTIME140.dll
          Filesize

          116KB

          MD5

          be8dbe2dc77ebe7f88f910c61aec691a

          SHA1

          a19f08bb2b1c1de5bb61daf9f2304531321e0e40

          SHA256

          4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83

          SHA512

          0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\VCRUNTIME140_1.dll
          Filesize

          48KB

          MD5

          f8dfa78045620cf8a732e67d1b1eb53d

          SHA1

          ff9a604d8c99405bfdbbf4295825d3fcbc792704

          SHA256

          a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5

          SHA512

          ba7f8b7ab0deb7a7113124c28092b543e216ca08d1cf158d9f40a326fb69f4a2511a41a59ea8482a10c9ec4ec8ac69b70dfe9ca65e525097d93b819d498da371

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\_bz2.pyd
          Filesize

          83KB

          MD5

          dd26ed92888de9c57660a7ad631bb916

          SHA1

          77d479d44d9e04f0a1355569332233459b69a154

          SHA256

          324268786921ec940cbd4b5e2f71dafd08e578a12e373a715658527e5b211697

          SHA512

          d693367565005c1b87823e781dc5925146512182c8d8a3a2201e712c88df1c0e66e65ecaec9af22037f0a8f8b3fb3f511ea47cfd5774651d71673fab612d2897

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\_ctypes.pyd
          Filesize

          122KB

          MD5

          c8afa1ebb28828e1115c110313d2a810

          SHA1

          1d0d28799a5dbe313b6f4ddfdb7986d2902fa97a

          SHA256

          8978972cf341ccd0edf8435d63909a739df7ef29ec7dd57ed5cab64b342891f0

          SHA512

          4d9f41bd23b62600d1eb097d1578ba656b5e13fd2f31ef74202aa511111969bb8cfc2a8e903de73bd6e63fadaa59b078714885b8c5b8ecc5c4128ff9d06c1e56

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\_decimal.pyd
          Filesize

          251KB

          MD5

          cea3b419c7ca87140a157629c6dbd299

          SHA1

          7dbff775235b1937b150ae70302b3208833dc9be

          SHA256

          95b9850e6fb335b235589dd1348e007507c6b28e332c9abb111f2a0035c358e5

          SHA512

          6e3a6781c0f05bb5182073cca1e69b6df55f05ff7cdcea394bacf50f88605e2241b7387f1d8ba9f40a96832d04f55edb80003f0cf1e537a26f99408ee9312f5b

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\_hashlib.pyd
          Filesize

          64KB

          MD5

          d19cb5ca144ae1fd29b6395b0225cf40

          SHA1

          5b9ec6e656261ce179dfcfd5c6a3cfe07c2dfeb4

          SHA256

          f95ec2562a3c70fb1a6e44d72f4223ce3c7a0f0038159d09dce629f59591d5aa

          SHA512

          9ac3a8a4dbdb09be3760e7ccb11269f82a47b24c03d10d289bcdded9a43e57d3cd656f8d060d66b810382ecac3a62f101f83ea626b58cd0b5a3cca25b67b1519

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\_lzma.pyd
          Filesize

          156KB

          MD5

          8cfbafe65d6e38dde8e2e8006b66bb3e

          SHA1

          cb63addd102e47c777d55753c00c29c547e2243c

          SHA256

          6d548db0ab73291f82cf0f4ca9ec0c81460185319c8965e829faeacae19444ff

          SHA512

          fa021615d5c080aadcd5b84fd221900054eb763a7af8638f70cf6cd49bd92773074f1ac6884f3ce1d8a15d59439f554381377faee4842ed5beb13ff3e1b510f4

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\_queue.pyd
          Filesize

          31KB

          MD5

          7d91dd8e5f1dbc3058ea399f5f31c1e6

          SHA1

          b983653b9f2df66e721ece95f086c2f933d303fc

          SHA256

          76bba42b1392dc57a867aef385b990fa302a4f1dcf453705ac119c9c98a36e8d

          SHA512

          b8e7369da79255a4bb2ed91ba0c313b4578ee45c94e6bc74582fc14f8b2984ed8fcda0434a5bd3b72ea704e6e8fd8cbf1901f325e774475e4f28961483d6c7cf

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\_socket.pyd
          Filesize

          81KB

          MD5

          e43aed7d6a8bcd9ddfc59c2d1a2c4b02

          SHA1

          36f367f68fb9868412246725b604b27b5019d747

          SHA256

          2c2a6a6ba360e38f0c2b5a53b4626f833a3111844d95615ebf35be0e76b1ef7a

          SHA512

          d92e26eb88db891de389a464f850a8da0a39af8a4d86d9894768cb97182b8351817ce14fe1eb8301b18b80d1d5d8876a48ba66eb7b874c7c3d7b009fcdbc8c4e

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\_ssl.pyd
          Filesize

          174KB

          MD5

          6a2b0f8f50b47d05f96deff7883c1270

          SHA1

          2b1aeb6fe9a12e0d527b042512fc8890eedb10d8

          SHA256

          68dad60ff6fb36c88ef1c47d1855517bfe8de0f5ddea0f630b65b622a645d53a

          SHA512

          a080190d4e7e1abb186776ae6e83dab4b21a77093a88fca59ce1f63c683f549a28d094818a0ee44186ddea2095111f1879008c0d631fc4a8d69dd596ef76ca37

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\_wmi.pyd
          Filesize

          36KB

          MD5

          bed7b0ced98fa065a9b8fe62e328713f

          SHA1

          e329ebca2df8889b78ce666e3fb909b4690d2daa

          SHA256

          5818679010bb536a3d463eeee8ce203e880a8cd1c06bf1cb6c416ab0dc024d94

          SHA512

          c95f7bb6ca9afba50bf0727e971dff7326ce0e23a4bfa44d62f2ed67ed5fede1b018519dbfa0ed3091d485ed0ace68b52dd0bb2921c9c1e3bc1fa875cd3d2366

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\base_library.zip
          Filesize

          1.3MB

          MD5

          48ba559bf70c3ef963f86633530667d6

          SHA1

          e3319e3a70590767ad00290230d77158f8f8307e

          SHA256

          f8377aa03b7036e7735e2814452c1759ab7ceec3f8f8a202b697b4132809ce5e

          SHA512

          567a7bef4a7c7ff0890708c0e62d2af748b645c8b9071953873b0dd5aa789c42796860896a6b5e539651de9a2243338e2a5fb47743c30dfcde59b1787c4c1871

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\certifi\cacert.pem
          Filesize

          284KB

          MD5

          181ac9a809b1a8f1bc39c1c5c777cf2a

          SHA1

          9341e715cea2e6207329e7034365749fca1f37dc

          SHA256

          488ba960602bf07cc63f4ef7aec108692fec41820fc3328a8e3f3de038149aee

          SHA512

          e19a92b94aedcf1282b3ef561bd471ea19ed361334092c55d72425f9183ebd1d30a619e493841b6f75c629f26f28dc682960977941b486c59475f21cf86fff85

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\charset_normalizer\md.cp312-win_amd64.pyd
          Filesize

          10KB

          MD5

          d9e0217a89d9b9d1d778f7e197e0c191

          SHA1

          ec692661fcc0b89e0c3bde1773a6168d285b4f0d

          SHA256

          ecf12e2c0a00c0ed4e2343ea956d78eed55e5a36ba49773633b2dfe7b04335c0

          SHA512

          3b788ac88c1f2d682c1721c61d223a529697c7e43280686b914467b3b39e7d6debaff4c0e2f42e9dddb28b522f37cb5a3011e91c66d911609c63509f9228133d

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\charset_normalizer\md__mypyc.cp312-win_amd64.pyd
          Filesize

          120KB

          MD5

          bf9a9da1cf3c98346002648c3eae6dcf

          SHA1

          db16c09fdc1722631a7a9c465bfe173d94eb5d8b

          SHA256

          4107b1d6f11d842074a9f21323290bbe97e8eed4aa778fbc348ee09cc4fa4637

          SHA512

          7371407d12e632fc8fb031393838d36e6a1fe1e978ced36ff750d84e183cde6dd20f75074f4597742c9f8d6f87af12794c589d596a81b920c6c62ee2ba2e5654

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\libcrypto-3.dll
          Filesize

          5.0MB

          MD5

          e547cf6d296a88f5b1c352c116df7c0c

          SHA1

          cafa14e0367f7c13ad140fd556f10f320a039783

          SHA256

          05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de

          SHA512

          9f42edf04c7af350a00fa4fdf92b8e2e6f47ab9d2d41491985b20cd0adde4f694253399f6a88f4bdd765c4f49792f25fb01e84ec03fd5d0be8bb61773d77d74d

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\libffi-8.dll
          Filesize

          38KB

          MD5

          0f8e4992ca92baaf54cc0b43aaccce21

          SHA1

          c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

          SHA256

          eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

          SHA512

          6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\libssl-3.dll
          Filesize

          768KB

          MD5

          19a2aba25456181d5fb572d88ac0e73e

          SHA1

          656ca8cdfc9c3a6379536e2027e93408851483db

          SHA256

          2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006

          SHA512

          df17dc8a882363a6c5a1b78ba3cf448437d1118ccc4a6275cc7681551b13c1a4e0f94e30ffb94c3530b688b62bff1c03e57c2c185a7df2bf3e5737a06e114337

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\python312.dll
          Filesize

          6.6MB

          MD5

          cae8fa4e7cb32da83acf655c2c39d9e1

          SHA1

          7a0055588a2d232be8c56791642cb0f5abbc71f8

          SHA256

          8ad53c67c2b4db4387d5f72ee2a3ca80c40af444b22bf41a6cfda2225a27bb93

          SHA512

          db2190da2c35bceed0ef91d7553ff0dea442286490145c3d0e89db59ba1299b0851e601cc324b5f7fd026414fc73755e8eff2ef5fb5eeb1c54a9e13e7c66dd0c

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\select.pyd
          Filesize

          30KB

          MD5

          79ce1ae3a23dff6ed5fc66e6416600cd

          SHA1

          6204374d99144b0a26fd1d61940ff4f0d17c2212

          SHA256

          678e09ad44be42fa9bc9c7a18c25dbe995a59b6c36a13eecc09c0f02a647b6f0

          SHA512

          a4e48696788798a7d061c0ef620d40187850741c2bec357db0e37a2dd94d3a50f9f55ba75dc4d95e50946cbab78b84ba1fc42d51fd498640a231321566613daa

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\_MEI25282\unicodedata.pyd
          Filesize

          1.1MB

          MD5

          b848e259fabaf32b4b3c980a0a12488d

          SHA1

          da2e864e18521c86c7d8968db74bb2b28e4c23e2

          SHA256

          c65073b65f107e471c9be3c699fb11f774e9a07581f41229582f7b2154b6fc3c

          SHA512

          4c6953504d1401fe0c74435bceebc5ec7bf8991fd42b659867a3529cee5cc64da54f1ab404e88160e747887a7409098f1a85a546bc40f12f0dde0025408f9e27

          Download Submit