Extracted

Extracted

• • Target

    72a7133bde9504a1bce251af15a80c092489f583fd74e060fa3f8a07943bd4a4.exe

  • Size

    1.2MB

  • MD5

    3d10835ad12c3ab37cd08002b14c4cbf

  • SHA1

    ed8597462099dbaa058ec8cf11049effba9a1ae8

  • SHA256

    72a7133bde9504a1bce251af15a80c092489f583fd74e060fa3f8a07943bd4a4

  • SHA512

    d875a65c596ce2c52f89e20027dbbe370414420ffd1cfc3a8f5ee878bfad1928fea82a7a30147ee74ebd3cdec1afe9125d124bb6234bc1bbd3a2d460b07b71ee

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCgHMIeLyf4Znaoe1oNWqxs:7JZoQrbTFZY1iaC2AA4ZnReyC

  Score

  10^/10

  vipkeyloggerdiscoverykeyloggerstealercollection

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2