vipkeylogger | 2984-4-0x0000000000400000-0x000000000044A000-memory[.]dmp

General

Target
2984-4-0x0000000000400000-0x000000000044A000-memory.dmp
Size 296KB
Sample241111-m156vs1rhl
SHA256 fbb5ebe8033ca6012996e7f47941455c9b29bc53b384c9374b3041ae3c829379
MD5 43111eae23193a775d006221153ed31b
SHA1 bb5c8a0eb1c9cdf7b413babd3d5cfee79b215e9e
SHA512 590cb11b9ffca971060172ab6386189ff5774694e19050af5caa65bbab010ce983082e5417c7bc5c024bbd17ea7cfc10a68d310686a23d09416999a9576b02b6
SSDEEP 3072:Osa/tZgz3080/mm5DHG7XoarprqH43or2L9lUDK5bfS3/Ks0tUYTVgCitbbY:nVzxZb6vq2b
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

keylogger stealer vipkeylogger

Malware Config

Extracted

Family

vipkeylogger

Credentials

Protocol
smtp
Host
mail.asesoriategueste.com
Port
587
Username
[email protected]
Password
2[K9AW)mvDqL
Email to
[email protected]

Signatures

Vipkeylogger family
vipkeylogger

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2984-4-0x0000000000400000-0x000000000044A000-memory.dmp

File Explorer

2984-4-0x0000000000400000-0x000000000044A000-memory.dmp

.exe 296KB

2984-4-0x0000000000400000-0x000000000044A000-memory.dmp

SHA256 fbb5ebe8033ca6012996e7f47941455c9b29bc53b384c9374b3041ae3c829379
MD5 43111eae23193a775d006221153ed31b
SHA1 bb5c8a0eb1c9cdf7b413babd3d5cfee79b215e9e
SHA512 590cb11b9ffca971060172ab6386189ff5774694e19050af5caa65bbab010ce983082e5417c7bc5c024bbd17ea7cfc10a68d310686a23d09416999a9576b02b6
SSDEEP 3072:Osa/tZgz3080/mm5DHG7XoarprqH43or2L9lUDK5bfS3/Ks0tUYTVgCitbbY:nVzxZb6vq2b
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

278654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing