General
- Target d4e1637d377233c4a2ae9e320bd0a60bc21378f72c129539ed762e7425f19c3c.exe
- Size 203KB
- Sample241013-b8w3datakf
- SHA256 d4e1637d377233c4a2ae9e320bd0a60bc21378f72c129539ed762e7425f19c3c
- MD5 951913403e63c64c5c1af7aba3689f7f
- SHA1 59aeca7e6da6aa76a39f97476d218631fc314f5c
- SHA512 232678bca16a2205cf8cc796bb39b56d53da9127a8dd8cad3c6c3b9bd14d0669ce4a9fbc9c3dd0c85bcd40ccb4ab49d0091068a99fe4267f6bf9f46bc3f12bb3
- SSDEEP 3072:5DKW1LgppLRHMY0TBfJvjcTp5XtXy71guavnKP8C3PPgubbY0:5DKW1Lgbdl0TBBvjc/rPKUswkb3
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d4e1637d377233c4a2ae9e320bd0a60bc21378f72c129539ed762e7425f19c3c.exe
Resource
win7-20240903-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
d4e1637d377233c4a2ae9e320bd0a60bc21378f72c129539ed762e7425f19c3c.exe
Resource
win10v2004-20241007-en
11 signatures
150 seconds
Malware Config
Extracted
Credentials
-
Protocol
smtp
-
Host
mail.itv-3.com
-
Port
587
-
Username
-
Password
Home123!
Extracted
Family
-
vipkeylogger
Targets
-
- Target d4e1637d377233c4a2ae9e320bd0a60bc21378f72c129539ed762e7425f19c3c.exe
- Size 203KB
- SHA256 d4e1637d377233c4a2ae9e320bd0a60bc21378f72c129539ed762e7425f19c3c
- MD5 951913403e63c64c5c1af7aba3689f7f
- SHA1 59aeca7e6da6aa76a39f97476d218631fc314f5c
- SHA512 232678bca16a2205cf8cc796bb39b56d53da9127a8dd8cad3c6c3b9bd14d0669ce4a9fbc9c3dd0c85bcd40ccb4ab49d0091068a99fe4267f6bf9f46bc3f12bb3
- SSDEEP 3072:5DKW1LgppLRHMY0TBfJvjcTp5XtXy71guavnKP8C3PPgubbY0:5DKW1Lgbdl0TBBvjc/rPKUswkb3
- MD5 SHA1 SHA512 SSDEEP
-
VIPKeylogger
VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.