General
-
Target
2984-4-0x0000000000400000-0x000000000044A000-memory.dmp
-
Size
296KB
-
MD5
43111eae23193a775d006221153ed31b
-
SHA1
bb5c8a0eb1c9cdf7b413babd3d5cfee79b215e9e
-
SHA256
fbb5ebe8033ca6012996e7f47941455c9b29bc53b384c9374b3041ae3c829379
-
SHA512
590cb11b9ffca971060172ab6386189ff5774694e19050af5caa65bbab010ce983082e5417c7bc5c024bbd17ea7cfc10a68d310686a23d09416999a9576b02b6
-
SSDEEP
3072:Osa/tZgz3080/mm5DHG7XoarprqH43or2L9lUDK5bfS3/Ks0tUYTVgCitbbY:nVzxZb6vq2b
Score
10/10
Malware Config
Extracted
Family
vipkeylogger
Credentials
Protocol: smtp- Host:
mail.asesoriategueste.com - Port:
587 - Username:
[email protected] - Password:
2[K9AW)mvDqL - Email To:
[email protected]
Signatures
-
Vipkeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2984-4-0x0000000000400000-0x000000000044A000-memory.dmp
Headers
Sections