Overview

overview

10

Static

static

10

1316-19-0x...ry.exe

windows7-x64

1316-19-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1316-19-0x0000000000400000-0x000000000044A000-memory.dmp

  • Size

    296KB

  • MD5

    50818e2dff814238550e6ebd0fbaebcd

  • SHA1

    429da572ba1ff2f8b86bc45d75e41367bef8cd11

  • SHA256

    3c7fcac652c10e1fc37b0c4fc5f817138e8290ad099ede996eabd9648a77546d

  • SHA512

    bef993a55f3cede82f47f79f72e799083337ec1b0d1357974c023b798c1692f7f21cd0dc24965f811a8b0515b1ccd0cbf4b2221e2fef9c6bdb8371352e93a3ae

  • SSDEEP

    6144:u+Pl979TDPRZnflRD9bv/RLDJVRwChKba8serrT/lGb1yLb:u+Pl979TDPRZnflRD9bv/RLDJVRwqKbP

Score
10/10
keyloggerstealervipkeylogger

Malware Config

Extracted

Family

vipkeylogger

C2

https://api.telegram.org/bot6820629737:AAGJ8tOkoD9jFHkd_L1kG1ntQ1J6zLhFsMc/sendMessage?chat_id=6783205225

Signatures

  • Vipkeylogger family
    vipkeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1316-19-0x0000000000400000-0x000000000044A000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections