vipkeylogger | 2724-17-0x0000000000400000-0x0000000000448000-memory[.]dmp | Triage

Sharing

General

Target

2724-17-0x0000000000400000-0x0000000000448000-memory.dmp
Size

288KB
MD5

16fa637d048b70b47b4eb4e6f1124b40
SHA1

2d18371c31bdb76acd56dfe2df12f8ebdd5892d9
SHA256

f1f0957d83fe680def886df7ebec9d8aa7db4c1c318640050cc5e0f70547cf4b
SHA512

c049132f48ff027ed8749d7cb333254bf35739b816c6e9f47075ece595885c9489852343eed7c95f2703af0006a35da0143dd7144297497a2a933eac57d0bea9
SSDEEP

3072:tyLnzT+lcn52l37S7Q7b7b727Z7X7juXXb4Z91nt4MpHJGqMgS2fbfqP4es0oZYd:tlMLfS2fbGWbb

Score

10^/10

keylogger stealer vipkeylogger

Malware Config

Extracted

Family

vipkeylogger

Credentials

Protocol: smtp
Host:
mail.vinatax.us
Port:
587
Username:
[email protected]
Password:
vinatax@2022
Email To:
[email protected]

Signatures

Vipkeylogger family
vipkeylogger

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2724-17-0x0000000000400000-0x0000000000448000-memory.dmp

Files

2724-17-0x0000000000400000-0x0000000000448000-memory.dmp
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ