vipkeylogger | 3480-218-0x0000000000CC0000-0x0000000000D08000-memory[.]dmp

General

Target
3480-218-0x0000000000CC0000-0x0000000000D08000-memory.dmp
Size 288KB
Sample241024-thwm2axbnm
SHA256 289383486f2415c3c96ca57186ab42f3aa71aed5f5a5c136ffab1fe1756a2be9
MD5 5fef415d90cc0cc6a8cd0ecf02ecac65
SHA1 f21178a6b168670d07b5432b7b7d2f4299e3932b
SHA512 071261195c5afd5a26dbe9333a2a9cda4c1247cf3fb4385924f71cfb31489cf34053c3243e51767acf064f7179657c1bb976debf116a4982f8defb2cbe0216b2
SSDEEP 3072:YL5TjLqJDguALBoaU9YXbVkLhTbtYwupHNCKUjPbebf9qCJs0uXYTVgHiRbbY:Dnu6KU7ablZaUb
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

keylogger stealer vipkeylogger

Malware Config

Extracted

Family

vipkeylogger

Credentials

Protocol
smtp
Host
smtp.ionos.es
Port
587
Username
[email protected]
Password
Escaragol?24
Email to
[email protected]

Signatures

Vipkeylogger family
vipkeylogger

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3480-218-0x0000000000CC0000-0x0000000000D08000-memory.dmp

File Explorer

3480-218-0x0000000000CC0000-0x0000000000D08000-memory.dmp

.exe 288KB

3480-218-0x0000000000CC0000-0x0000000000D08000-memory.dmp

SHA256 289383486f2415c3c96ca57186ab42f3aa71aed5f5a5c136ffab1fe1756a2be9
MD5 5fef415d90cc0cc6a8cd0ecf02ecac65
SHA1 f21178a6b168670d07b5432b7b7d2f4299e3932b
SHA512 071261195c5afd5a26dbe9333a2a9cda4c1247cf3fb4385924f71cfb31489cf34053c3243e51767acf064f7179657c1bb976debf116a4982f8defb2cbe0216b2
SSDEEP 3072:YL5TjLqJDguALBoaU9YXbVkLhTbtYwupHNCKUjPbebf9qCJs0uXYTVgHiRbbY:Dnu6KU7ablZaUb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

277422

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing