Extracted

• • Target

    a433aa981a5cbfd5fae678c523b088d034f61f57dcb61232fbaba73657867b36.exe

  • Size

    777KB

  • MD5

    69f5ec778e467c7d87f15b201c893816

  • SHA1

    4e2b63cce411847e95177765064b3fc03463590b

  • SHA256

    a433aa981a5cbfd5fae678c523b088d034f61f57dcb61232fbaba73657867b36

  • SHA512

    8c31ed6c55abfb8d4e5ab9f8b39d05571a583322385a7fc28427f48326ec5e43e9c66c99748e0c53cbc98c904175ffa82aac5d539121c095dda06355b6b7890b

  • SSDEEP

    24576:vOGaAeBqAiwCZDOwl3UYfWFEBftBW2Zye:4LgAiTZDhlRWFEBVw2ZF

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2