Extracted

• • Target

    Maksājums10312024,jpg.exe

  • Size

    1.4MB

  • MD5

    d155bbf3b7aeebfcd96f0ad99ab8d634

  • SHA1

    22150906ad0e14b9385ae7fd079f37d960be4213

  • SHA256

    140f74d6834ec93d4279dd1f3c9efe3a0a68c8ee78a63cb9556d990fd6753fe5

  • SHA512

    eb3b5ff3b002329bb6ea0e1c1ed30d0273b361984dfc8942f1d5cc34f4462d9499cfbfb8742f6f31d93f3416c6936c00aa379cc3f5b0a6f78380746f1f12dc6c

  • SSDEEP

    24576:sqDEvCTbMWu7rQYlBQcBiT6rprG8aTdo8vtaByatj8iZCMkb0k//Mz:sTvC/MTQYxsWR7aTNveHtRZCM+M

  Score

  10^/10

  vipkeyloggerdiscoverykeyloggerstealercollection

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2