Overview

overview

10

Static

static

10

2904-20-0x...ry.exe

windows7-x64

2904-20-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2904-20-0x0000000000400000-0x000000000044A000-memory.dmp

  • Size

    296KB

  • MD5

    1d8e43a64dbbb642f9988d849408db0a

  • SHA1

    f46508693692b2b706ed4defcd940cd1e64201d5

  • SHA256

    c40293737dedfc6ff5cdadb442928f377c96f04a52b59ba2708ab05cade9e0ad

  • SHA512

    8e04f65b47485f642c0d9597fbb94558d1eeef485511d41861e411177081340f5db6229e5925c23f2fba78cfe1393798cf8921d453d1dcb9b01ce01f1a4a3eb0

  • SSDEEP

    3072:gaOz0UFD7q39q7Qp7B4CPth86rXXR9Y2ygyGZtf8pH4Usj9caubfoL2s8Q6qmiLZ:gm39q8pdKc8BSubgasNRkb

Score
10/10
keyloggerstealervipkeylogger

Malware Config

Extracted

Family

vipkeylogger

C2

https://api.telegram.org/bot7563060616:AAGgGu8pocoVNLzoow0Ge2U2GVDS9nDmL6Q/sendMessage?chat_id=7222025033

Signatures

  • Vipkeylogger family
    vipkeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2904-20-0x0000000000400000-0x000000000044A000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections