vipkeylogger | 1932-21-0x0000000000400000-0x0000000000448000-memory[.]dmp

General

Target
1932-21-0x0000000000400000-0x0000000000448000-memory.dmp
Size 288KB
Sample241009-h4eqvsshkp
SHA256 1dce1575daf6776b8c509897d19c9225f4e037f74a2b948d1238d564d2bf8e14
MD5 158fba361acf10d01302c4d8f4a0212d
SHA1 de0c3fa12aad907e60bd90bc87c90f2865d8384f
SHA512 6f13eb549175c114e1cdef533944a5c77b6bf968304788107cc76ad5f4cbb37ab95fd399c464db475f03ac521301cc017f75e288aeb12abf9ce85386b1b14c92
SSDEEP 3072:PBS/rmeryu6p+W7UrpXNkxstad2lSLKwU10dKQnVb2QfDs0EZY/VgaiXbbY:07l9y1nVb2JVb
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

keylogger stealer vipkeylogger

Malware Config

Extracted

Family

vipkeylogger

Credentials

Protocol
smtp
Host
185.198.59.26
Port
587
Username
[email protected]
Password
7213575aceACE@@
Email to
[email protected]

Signatures

Vipkeylogger family
vipkeylogger

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1932-21-0x0000000000400000-0x0000000000448000-memory.dmp

File Explorer

1932-21-0x0000000000400000-0x0000000000448000-memory.dmp

.exe 288KB

1932-21-0x0000000000400000-0x0000000000448000-memory.dmp

SHA256 1dce1575daf6776b8c509897d19c9225f4e037f74a2b948d1238d564d2bf8e14
MD5 158fba361acf10d01302c4d8f4a0212d
SHA1 de0c3fa12aad907e60bd90bc87c90f2865d8384f
SHA512 6f13eb549175c114e1cdef533944a5c77b6bf968304788107cc76ad5f4cbb37ab95fd399c464db475f03ac521301cc017f75e288aeb12abf9ce85386b1b14c92
SSDEEP 3072:PBS/rmeryu6p+W7UrpXNkxstad2lSLKwU10dKQnVb2QfDs0EZY/VgaiXbbY:07l9y1nVb2JVb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1950514415

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing