Extracted

Extracted

• • Target

    6ade2b250774bfe4e5bbe3f21b0500758c7fce2d9b15fa8346a1df50bcc2d5a9N

  • Size

    1.6MB

  • MD5

    a8c891b9bdff16b924f63b04ff1f9130

  • SHA1

    e81df53bfff3c7aa8c9ad8e07869b4b6c1c6f34a

  • SHA256

    6ade2b250774bfe4e5bbe3f21b0500758c7fce2d9b15fa8346a1df50bcc2d5a9

  • SHA512

    b949b45c5eb27452635e534eb266d5b3bd3179422c87a92b07f526d87838cd1624f69154f22967b48362183af3d9d305d6750696b95517420adfd057f74dadac

  • SSDEEP

    49152:FAodtaG9kS2U84B+FLan9k5TRM9zlXVjwbLT:X/B1

  Score

  10^/10

  vipkeyloggercollectioncredential_accessdiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2