General

  • Target

    2320-19-0x0000000000400000-0x000000000044A000-memory.dmp

  • Size

    296KB

  • MD5

    9cc5d8ab481d5410754bfd9175df1095

  • SHA1

    12fe09e7b28509dab7d5cbe884a2c75fb99c3f8a

  • SHA256

    6953d022c138cbf935a9660b58fbb664b2e5c9bfab16d33af8bc507e1f9fb692

  • SHA512

    faf1b82ea714d4944016cf66755e96f7c5604c8b09c218d5ec00c9f7e3be115d5f0ea71cfab8b6cd95d75b5c13e65c874e2e35e0b5ab7c020410e60669d53982

  • SSDEEP

    3072:0jQwvglYZjCZS0IbCRXcAOKsz8RcTRnpl+CinbRjroaey2WsoeUY/Vgmdi8bbY:nc/l+/nblvP2t9b

Malware Config

Extracted

Family

vipkeylogger

Credentials

Signatures

  • Vipkeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2320-19-0x0000000000400000-0x000000000044A000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections