Extracted

Extracted

• • Target

    450263cedbe5d901be307443c37f523199d3b580f25ec0a465f8e0a2168b6663

  • Size

    1.0MB

  • MD5

    dec46dac148d93e5e44e895b0ffd51e4

  • SHA1

    dec610740835a7ffcd3a39a3fad82dc3eebc2830

  • SHA256

    450263cedbe5d901be307443c37f523199d3b580f25ec0a465f8e0a2168b6663

  • SHA512

    d62095c848bdd058460e38a9dccc24c1162535f683d3d51f81d954b95c80cd01f856e3303296f6fcab00732ec144a3854fb22b6f3efaf400a1d869c86390d3c1

  • SSDEEP

    24576:Gtb20pkaCqT5TBWgNQ7aPlBfHXJqWU1IVz6A:zVg5tQ7aPHHZqWn5

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2