General

  • Target
    7adf369e098a8e04f5bc8cb214d94a301c314df0ef8849996f0365fdc8f363f5.exe
  • Size 1.1MB
  • Sample241008-qcmldsydml
  • SHA256 7adf369e098a8e04f5bc8cb214d94a301c314df0ef8849996f0365fdc8f363f5
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • vipkeylogger

C2
  • https://api.telegram.org/bot7237448805:AAFfACjjHzenA5p6fxx6-TwOCE3qt40fdJQ/sendMessage?chat_id=6050798253

Targets

    • Target
      7adf369e098a8e04f5bc8cb214d94a301c314df0ef8849996f0365fdc8f363f5.exe
    • Size 1.1MB
    • SHA256 7adf369e098a8e04f5bc8cb214d94a301c314df0ef8849996f0365fdc8f363f5
    • MD5 SHA1 SHA512 SSDEEP
    • VIPKeylogger

      VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks