vipkeylogger | 1080-14-0x0000000000400000-0x0000000000448000-memory[.]dmp

General

Target
1080-14-0x0000000000400000-0x0000000000448000-memory.dmp
Size 288KB
Sample241007-mmzf6avama
SHA256 0bff1529f99df56906d742e4f514191b67be623ac21eea945dbd00ed2f6968f7
MD5 23517f9c92dd0472c2a49038455d585f
SHA1 e2d4070d1fb78d32a2df4e8e0930820e7c387a9a
SHA512 d486f0baea4a9f1feb8460abd8b3692b59bf1d4332a7d63d591c05eba5246ce6a9513aec5605ae6c796d2c810ddb96a197c6023adc2b3961477a80210114ab22
SSDEEP 3072:JfRVk7mtPLlHLOBv0pXNibtJUEr2SLK4U10dKQnVb2QfDs0FZY/VgaiXbbY:542Vy1nVb2YVb
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

keylogger stealer vipkeylogger

Malware Config

Extracted

Family

vipkeylogger

Credentials

Protocol
smtp
Host
mail.jhxkgroup.online
Port
587
Username
[email protected]
Password
7213575aceACE@@
Email to
[email protected]

Signatures

Vipkeylogger family
vipkeylogger

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1080-14-0x0000000000400000-0x0000000000448000-memory.dmp

File Explorer

1080-14-0x0000000000400000-0x0000000000448000-memory.dmp

.exe 288KB

1080-14-0x0000000000400000-0x0000000000448000-memory.dmp

SHA256 0bff1529f99df56906d742e4f514191b67be623ac21eea945dbd00ed2f6968f7
MD5 23517f9c92dd0472c2a49038455d585f
SHA1 e2d4070d1fb78d32a2df4e8e0930820e7c387a9a
SHA512 d486f0baea4a9f1feb8460abd8b3692b59bf1d4332a7d63d591c05eba5246ce6a9513aec5605ae6c796d2c810ddb96a197c6023adc2b3961477a80210114ab22
SSDEEP 3072:JfRVk7mtPLlHLOBv0pXNibtJUEr2SLK4U10dKQnVb2QfDs0FZY/VgaiXbbY:542Vy1nVb2YVb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

276654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing