Extracted

• • Target

    430d86bfb2de677a75f5ce23e29e1aab0ae94bac59fc5e49d3c5edaf2c243e9f

  • Size

    1.2MB

  • MD5

    0965ff93f915f33bf17807104b3279f7

  • SHA1

    c00011bf990783683728ba59ee185b7a1f3d344a

  • SHA256

    430d86bfb2de677a75f5ce23e29e1aab0ae94bac59fc5e49d3c5edaf2c243e9f

  • SHA512

    3a6cadb5046aa4d865030e44f6a95b04354416362dfa8aaf5778f3288a1f172d075308acb2cf7ca0a50ff586ec2bf4ce517d4bd21bd6f6cfb5798b9332702ff5

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaC2EYJO7Vx9SYy3eZLXnTyurEbi3XhhR:7JZoQrbTFZY1iaC2OJ/ny3KGuSizR

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2