Extracted

• • Target

    66f3bf9d947dcc82fe524bdf828b07e19620427364c573348738c32bc5466c49.exe

  • Size

    1.1MB

  • MD5

    b30f0b168940b8cebc1ab804f1e67611

  • SHA1

    aa97336efa611afa7a0aaf4967af21734c74f1dc

  • SHA256

    66f3bf9d947dcc82fe524bdf828b07e19620427364c573348738c32bc5466c49

  • SHA512

    7e7e578e9e0e0efa82299c40ad1de1537eebc0ae53ba389eb352e815f913207394d2f2d6c170ce86ee63a20c04ea29a4255e12fb902b289c7b771bf152dddc38

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QLeBt/TYe99PuOP0wo2q8VQyW:f3v+7/5QLmbYeXmOP7o2quW

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2