General
- Target 7adf369e098a8e04f5bc8cb214d94a301c314df0ef8849996f0365fdc8f363f5.exe
- Size 1.1MB
- Sample241008-qcmldsydml
- SHA256 7adf369e098a8e04f5bc8cb214d94a301c314df0ef8849996f0365fdc8f363f5
- MD5 f1a07c17ad3c8ed4c662c47882debf4f
- SHA1 4a1ac11c8f390e615b063d0253bcf10727144746
- SHA512 4bdb275879ef16582a500ed90035d6018be0a4a349a1780ec73fdd6f415e07a9ee1b6abb307b4db388a8a46f82739ad700fe1968fbd8afab77e9210be7f43143
- SSDEEP 24576:uRmJkcoQricOIQxiZY1iaCbeFmDY4062Rca4bZ+v1Qu5qXhUTX:7JZoQrbTFZY1iaC8os6IPc+v1whW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
7adf369e098a8e04f5bc8cb214d94a301c314df0ef8849996f0365fdc8f363f5.exe
Resource
win7-20240708-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
7adf369e098a8e04f5bc8cb214d94a301c314df0ef8849996f0365fdc8f363f5.exe
Resource
win10v2004-20241007-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
vipkeylogger
C2
-
https://api.telegram.org/bot7237448805:AAFfACjjHzenA5p6fxx6-TwOCE3qt40fdJQ/sendMessage?chat_id=6050798253
Targets
-
- Target 7adf369e098a8e04f5bc8cb214d94a301c314df0ef8849996f0365fdc8f363f5.exe
- Size 1.1MB
- SHA256 7adf369e098a8e04f5bc8cb214d94a301c314df0ef8849996f0365fdc8f363f5
- MD5 f1a07c17ad3c8ed4c662c47882debf4f
- SHA1 4a1ac11c8f390e615b063d0253bcf10727144746
- SHA512 4bdb275879ef16582a500ed90035d6018be0a4a349a1780ec73fdd6f415e07a9ee1b6abb307b4db388a8a46f82739ad700fe1968fbd8afab77e9210be7f43143
- SSDEEP 24576:uRmJkcoQricOIQxiZY1iaCbeFmDY4062Rca4bZ+v1Qu5qXhUTX:7JZoQrbTFZY1iaC8os6IPc+v1whW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
VIPKeylogger
VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.
-
Suspicious use of SetThreadContext