General

  • Target

    54e2dec7f1d626d27c77ac4120f0067e.exe

  • Size

    205KB

  • MD5

    54e2dec7f1d626d27c77ac4120f0067e

  • SHA1

    a2adb06e82bf86ec1b9e87b978c91a60e373b7e4

  • SHA256

    de438de16b4f43d13405c49a765d7c3ce3569f72014fcdb59a88643807282758

  • SHA512

    788c2e306a16259ad8ff879a7757761408dcad56ab838031cbd7d5442222f37238ace84169c3b2e1f8e58dc7bda625989748182d17d0a51a762f68c64944041e

  • SSDEEP

    3072:pi8zGMcOGgRcO+X+uSeSQShSySXS5SVdXrXBGiadh62AbyvjnmiLvYTKBgDbbY:MVtVuZJ/QtCIRaMbGOb

Malware Config

Extracted

Family

vipkeylogger

C2

https://api.telegram.org/bot7611035255:AAG6J_WQ-wtnA6fnjVOncSf7x3AgQMz3pIk/sendMessage?chat_id=7469598136

Signatures

  • Vipkeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 54e2dec7f1d626d27c77ac4120f0067e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections