General
-
Target
0fa6ec35baf7c545d34fd951158f76356f9f9137481fe4da8b2306e65fb255e6
-
Size
242KB
-
MD5
dcee375c2af4d1dbb15a191708e17f43
-
SHA1
55e0abac12848e2e5d8d67fce607e1ab79abd4ae
-
SHA256
0fa6ec35baf7c545d34fd951158f76356f9f9137481fe4da8b2306e65fb255e6
-
SHA512
60438fc43c56218e248c25f286475bb06a003d7054e255eed4e1373cd46d2c5497f46ab27aa84850a48eba3a0d3826c0854b965f396e136d339013aea218c3b3
-
SSDEEP
6144:GK0jMsk4ciMA4W+hlEyUaq+YaeQB99PvPdHDYDvgbUrlb:GK0jMsk4ciMA4W+hlEyUaq+YaeQB99P4
Score
10/10
Malware Config
Extracted
Family
vipkeylogger
C2
https://api.telegram.org/bot7209380453:AAEH-gogMFfHJ_6z9TDZgjtKUpNlaCxNBdw/sendMessage?chat_id=2104099256
Signatures
-
Vipkeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0fa6ec35baf7c545d34fd951158f76356f9f9137481fe4da8b2306e65fb255e6
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections