General
- Target d18dfd79e2d29687bdd9d650cb91e295c4dc449e7905344e093a687f16051535.exe
- Size 203KB
- Sample241012-b99pvswejg
- SHA256 d18dfd79e2d29687bdd9d650cb91e295c4dc449e7905344e093a687f16051535
- MD5 a995278221eb6ef16d96286706b7eb93
- SHA1 118cc44b14390b6e20fd8aec7734a263f1eb8163
- SHA512 e74016b04b801212f3658e5a2415a8310fc955d6131e9959ab736ecff9a8e82ceea2a440e1db3fa393a323a4f0a6d3b7833a84af59a601d6339258b7d62e3583
- SSDEEP 3072:WDKW1LgppLRHMY0TBfJvjcTp5X2i+dt5sOzmypGeuRVD+bbYx:WDKW1Lgbdl0TBBvjc/WfzpIdebu
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d18dfd79e2d29687bdd9d650cb91e295c4dc449e7905344e093a687f16051535.exe
Resource
win7-20240903-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
d18dfd79e2d29687bdd9d650cb91e295c4dc449e7905344e093a687f16051535.exe
Resource
win10v2004-20241007-en
11 signatures
150 seconds
Malware Config
Extracted
Credentials
-
Protocol
smtp
-
Host
mail.itv-3.com
-
Port
587
-
Username
-
Password
Home123!
Extracted
Family
-
vipkeylogger
Targets
-
- Target d18dfd79e2d29687bdd9d650cb91e295c4dc449e7905344e093a687f16051535.exe
- Size 203KB
- SHA256 d18dfd79e2d29687bdd9d650cb91e295c4dc449e7905344e093a687f16051535
- MD5 a995278221eb6ef16d96286706b7eb93
- SHA1 118cc44b14390b6e20fd8aec7734a263f1eb8163
- SHA512 e74016b04b801212f3658e5a2415a8310fc955d6131e9959ab736ecff9a8e82ceea2a440e1db3fa393a323a4f0a6d3b7833a84af59a601d6339258b7d62e3583
- SSDEEP 3072:WDKW1LgppLRHMY0TBfJvjcTp5X2i+dt5sOzmypGeuRVD+bbYx:WDKW1Lgbdl0TBBvjc/WfzpIdebu
- MD5 SHA1 SHA512 SSDEEP
VIPKeylogger
VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.
Accesses Microsoft Outlook profiles
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.