Extracted

• • Target

    c43f4d0f453155a1a2b83f793bcaf83429cc7c6452f430a1763eec9a31fd70a0.exe

  • Size

    864KB

  • MD5

    abc05276ba6305e8fdbf08b1cfa8a005

  • SHA1

    50aa13bd7ef461bce463b6d3d033d89c22bb22e0

  • SHA256

    c43f4d0f453155a1a2b83f793bcaf83429cc7c6452f430a1763eec9a31fd70a0

  • SHA512

    7fe9ad83fdcec2ba857b9ad65056e3b9e94db7f402de266005ea1c086214803df28f8ca1ca1ce739fa4b513a77a5f950c2ad9aaad88895c8a00042d2c6bbe5ef

  • SSDEEP

    24576:VBoxRSK/hLdpel2qkQTeYH0EA66TdCrfs4Pix12bUsua:cHSYdckQ6Y5A55CNPix12Vu

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2