vipkeylogger | ac0aa1f04bd84b20f0e101cfcedef7ec504109cbe7593d4175edea2c04544787 | Triage

Sharing

General

Target

2756-23-0x0000000000400000-0x0000000000448000-memory.dmp
Size

288KB
Sample

241031-1bkqhstglq
MD5

30b1b2981277bdc7c647fba04880e81b
SHA1

80607036164cd22ae97fbcb41534b4d05db7a2cd
SHA256

ac0aa1f04bd84b20f0e101cfcedef7ec504109cbe7593d4175edea2c04544787
SHA512

1ee3b19830717c26483753700f0efe9cac2536278280f5ba51909d5c9c3650c34a32cf5d766e8002bb268df5f77c78cc50fd487788e83ccbb0689390b143aea3
SSDEEP

3072:bkomb6hVqdvy1oZlttlXlTgeAGYEGnkGpH5EJ/iFnpw7abfxWNcZUsjJeYTVg4iL:3lc/odbZWutPb

Score

10^/10

vipkeylogger keylogger stealer

Malware Config

Extracted

Family

vipkeylogger

Credentials

Protocol: smtp
Host:
mail.cristalee.com
Port:
587
Username:
[email protected]
Password:
vVafScNlLB
Email To:
[email protected]

C2

https://api.telegram.org/bot6328369484:AAGfu7CzI26SlUIo2R4VmGTXCS_XV2LzGAs/sendMessage?chat_id=5590894570

Targets

- Target
  
  2756-23-0x0000000000400000-0x0000000000448000-memory.dmp
- Size
  
  288KB
- MD5
  
  30b1b2981277bdc7c647fba04880e81b
- SHA1
  
  80607036164cd22ae97fbcb41534b4d05db7a2cd
- SHA256
  
  ac0aa1f04bd84b20f0e101cfcedef7ec504109cbe7593d4175edea2c04544787
- SHA512
  
  1ee3b19830717c26483753700f0efe9cac2536278280f5ba51909d5c9c3650c34a32cf5d766e8002bb268df5f77c78cc50fd487788e83ccbb0689390b143aea3
- SSDEEP
  
  3072:bkomb6hVqdvy1oZlttlXlTgeAGYEGnkGpH5EJ/iFnpw7abfxWNcZUsjJeYTVg4iL:3lc/odbZWutPb
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

keyloggerstealervipkeylogger

behavioral1

behavioral2