Extracted

Extracted

• • Target

    9d64a20e0c71ad132706add58a0f8247737500e6f861365214febd9daaadea30

  • Size

    645KB

  • MD5

    778160556d73427cd6ba266bbbb8dbdb

  • SHA1

    6cad2f8457fc08e1c08d22b9860fe456d3b8cce7

  • SHA256

    9d64a20e0c71ad132706add58a0f8247737500e6f861365214febd9daaadea30

  • SHA512

    4bb9aef2b964c0ec0821b8ac5756c97b61580276bf7ef1e6279852aba824602c6569e76018e46d07c30c82c57b864c49933dffb555225eb231571eba0c6c0dd5

  • SSDEEP

    12288:kTUSBLQexTnafOU/2Gjmld3mLkSJJmNYMQvE33A/k6ZeeQVmOVPts:kTBnTVzGjm3ikMJRbk6PQV/ts

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2