Extracted

Extracted

• • Target

    0b0b2ba32fb5312ed77ae6925fbbdc872810de0e3566d5b04dbaace7e2f0dc68.exe

  • Size

    1016KB

  • MD5

    cfd6b4c3cc561d2776ce868f4ba72b69

  • SHA1

    081ab7b00963433a521ee26ec231bcfa3c47f6c8

  • SHA256

    0b0b2ba32fb5312ed77ae6925fbbdc872810de0e3566d5b04dbaace7e2f0dc68

  • SHA512

    cdac60c82ca54213a2a42226653e89ff56fb4dc8f3379423acd4e91a74b67320cb788f8b427e23f871ce63da61bdcde691d17732051c6a4d05753a116bbe03b3

  • SSDEEP

    24576:bLufVqijKZ7Svyl02t8wMBWvKVZLHo5nwe6QrkcJaEi0tg:bCfV9jK0yl026w2roC7CkcQELg

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2