General
-
Target
2056-9-0x0000000000400000-0x000000000044A000-memory.dmp
-
Size
296KB
-
MD5
00d6483044550f437e9375f199b20445
-
SHA1
8fbb228799f6482fa43da42b7ad5175b548d4c78
-
SHA256
027b0cdb894c3712e7afd9d27a52e7dc6a6590f589731321f848d18ab6da7c78
-
SHA512
1b34f4bdd72eb39fe9d1fc333287f3c2368dcc61cda946ccc9f26d1138ea0a0b7cea7383cdc8b2bf6e892c78a5b9509e156cdc50ceffda068a664f8c15c0cfc2
-
SSDEEP
3072:wRBEHN5GG2RFebhk8bXVjEdICQ7TSLWrWfOqM0bIvG9vwzasoMUY/Vg4i:tTyLbrIn
Score
10/10
Malware Config
Extracted
Family
vipkeylogger
Credentials
Protocol: smtp- Host:
mail.kdt.co.id - Port:
587 - Username:
[email protected] - Password:
Multi12345-!@# - Email To:
[email protected]
Signatures
-
Vipkeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2056-9-0x0000000000400000-0x000000000044A000-memory.dmp
Headers
Sections