Extracted

• • Target

    Piraeus Payment 11.11.2024.bat

  • Size

    77.0MB

  • MD5

    6ec59574b2c103bebf0e1eb8581a7e72

  • SHA1

    3e535f051221d7224ba3dc3ed82348b3878229cc

  • SHA256

    1156bb4a48995534cffe5910ea49b3bd5b5b50d60721adbfc191af0cce5f1ce6

  • SHA512

    4a414429d2b3d785b2fee33e12e6fc9734cf8898a8de2eb838007885759465d4bf25569547c2769eadb07f223a81bd5decc07ff2ee5511d419d2343f6bea2001

  • SSDEEP

    24576:65EmXFtKaL4/oFe5T9yyXYfP1ijXdaK9blP/4FmqIMCsFEAaJpSZ:6PVt/LZeJbInQRaK9xP/4VCZp

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2