Extracted

• • Target

    07621397877f04000d2d2fc95b976917f2686c78aa492dd31e606d1e4393c576

  • Size

    1.4MB

  • MD5

    f17e5d55f7fc5f5f1627189e55773f54

  • SHA1

    888b1a7e5afb7d9c23f809ae1fd63d6721f14c4f

  • SHA256

    07621397877f04000d2d2fc95b976917f2686c78aa492dd31e606d1e4393c576

  • SHA512

    0796e0538d55a7d02c61742c8046698832f23fe0b12fa582049e743277afa2a63cfd1f8d5b3dd8cab9be853523e0464cc03ca65c93af6e7b1479aa4297161ac4

  • SSDEEP

    24576:hqDEvCTbMWu7rQYlBQcBiT6rprG8a8i5izA+fnUrodm3QG6IEeGBFE:hTvC/MTQYxsWR7a8i5gT9hWG

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2