Extracted

• • Target

    RFQ Full Specification Dubai Project.exe

  • Size

    1.2MB

  • MD5

    9fd08d8bd38bf1aded484c9c0b066db0

  • SHA1

    83ad6049abe99f34786a770853503dde2fd24379

  • SHA256

    86ccd22196cd310f349cf8cb08d88d656642be9bc4970177f29a121898bad162

  • SHA512

    e1121c3e74e48cd31d813f509e57fdf56ab4f2944054896b896093b199662a501690fa9b60a512cb5e892f3b5f4111eac1790f8eaf11944fa08e0ca1e62c7970

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QL7aXyqRESrcZLJd/y0TNYOzs3+wY8b:f3v+7/5QLeyqR9rsJdZT6l3xYK

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2