Extracted

Extracted

• • Target

    01831899-1 FDMS3008SDC.exe

  • Size

    3.3MB

  • MD5

    e9e2f3739a0cb1a0025c2721ce80c79a

  • SHA1

    4360ce0f74843faba747e3746a37e49d965e319b

  • SHA256

    2fee9e3c6155c5716c179eec08819cd55bc5dc1171cb7ad47036ece432cfb1ef

  • SHA512

    07af22b42f4967c443b151fd0225e7b6fb4d908acb447186fca0eb6c9b3bb6ad76689d3b4634d0b79cc39cde5143c8f11b6c4423481b38a131ac0f42ee770c32

  • SSDEEP

    12288:BjvjM34XUe5Z20BXdHhOoaVUQqiJL2Lchnlk8lq7oIqvdkDykVHWCaDq:BjrdUOY0phAoaVUQn2LcHk8lq7oIII3X

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2