Extracted

• • Target
    5d4a99440308479e4b97797fc6518240e1617df62bb938d3f735026931d7bed3.img
  • Size 1.6MB
  • SHA256 5d4a99440308479e4b97797fc6518240e1617df62bb938d3f735026931d7bed3
  • MD5 213a8ce5aaa962f33a78f6053f6956ba
  • SHA1 339df70ab6152e4b20d81d4180943fc6fcb1f752
  • SHA512 206b9ffea2e80b822f9d1f5cbc3963382416d8a0d681ac157eb2647e6f48c816e59469037c1c30ecec96beee14e366de367fcb6aa46a7a132a39ee06d6e89935
  • SSDEEP 24576:3fmMv6Ckr7Mny5QLMwDMZE4mqu6p0DWsRmic2V993wZC:33v+7/5QLMLE2hq93w
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral1behavioral2
• • Target
    out.iso
  • Size 1.6MB
  • SHA256 5d4a99440308479e4b97797fc6518240e1617df62bb938d3f735026931d7bed3
  • MD5 213a8ce5aaa962f33a78f6053f6956ba
  • SHA1 339df70ab6152e4b20d81d4180943fc6fcb1f752
  • SHA512 206b9ffea2e80b822f9d1f5cbc3963382416d8a0d681ac157eb2647e6f48c816e59469037c1c30ecec96beee14e366de367fcb6aa46a7a132a39ee06d6e89935
  • SSDEEP 24576:3fmMv6Ckr7Mny5QLMwDMZE4mqu6p0DWsRmic2V993wZC:33v+7/5QLMLE2hq93w
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral3behavioral4
• • Target
    9236-pagaconferma-jpg.exe
  • Size 1.1MB
  • SHA256 227f6ffec17185b0f15ef324705b35ab5859020ed58345ff63c59dbd5f1a0781
  • MD5 1aefaa71b8996d22cad66a84a7f279a0
  • SHA1 4ec6f2fe363b2c5422f684c0c2abfdaddc25b781
  • SHA512 67081cf6ea7a56764b8d97610c69747b6ec352ea5b7c18ef717124d8b926c6394746aad22c8590920479b9c8c8c0158ed9e0e320562e943a2e81f129af615164
  • SSDEEP 24576:ffmMv6Ckr7Mny5QLMwDMZE4mqu6p0DWsRmic2V993wZCA:f3v+7/5QLMLE2hq93wP
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral5behavioral6