Extracted

• • Target

    3ba352819c7abd6700100363b3f63e070549433564bd7636cdd0cf53b6356dc2N

  • Size

    802KB

  • MD5

    280846047c1c992d510de8e8e55c59d0

  • SHA1

    dd90f1a5223c6a92679c138b88531c7ed13763c2

  • SHA256

    3ba352819c7abd6700100363b3f63e070549433564bd7636cdd0cf53b6356dc2

  • SHA512

    badd464536ca06951298b31637f4b081671c18f9c4280490954016a9f6811b29334e32db3163156275f86715a4366ce49f265eec5ddb6e02f07c0d4c1137c63d

  • SSDEEP

    24576:hYJW0Qyhwv6LcDU99IFkuyvo9rVzk6BQYYij2B0YY:4Zwv6LYU9ebyvolL2iYY

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2