Extracted

• • Target

    お見積り依頼.exe

  • Size

    798KB

  • MD5

    d705e3b00a1125882c95bdfbb1bbf75a

  • SHA1

    e3088a8c568b42841be80bd7cc33713cc71eb1cf

  • SHA256

    a4e1e0459aaae381373eddecc0d421f6750cc55313a9f2afda5a2490863e6766

  • SHA512

    0793ad7c7f5d183c5d226c629378ab1ee89df33f9ec85175dd86ec190e10f4e87aa25305001ee5aa5a90a4dad0d55380f5c01c7b2700acd89d7738f42ec2335c

  • SSDEEP

    24576:w1SoVmA5mFsXVw68oDqIUxMDu/JtOTGPQHHJq:US2Tjx8VIeFGHJq

  Score

  10^/10

  vipkeyloggerdiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1