Extracted

• • Target

    4c3e362e7263ed1d17aa6c8681079c015e590503ff52e534078afe45333e872c.exe

  • Size

    77.0MB

  • MD5

    27104bc9bbda65335f6d957b2a46f54e

  • SHA1

    f0318487cc08efd7610cae7709e4e64ee674900a

  • SHA256

    4c3e362e7263ed1d17aa6c8681079c015e590503ff52e534078afe45333e872c

  • SHA512

    fc04decf67ab836c63d4fc7ffc4df7a36074d228e7cd035fc329275a947f2c5bebd0289bdc8cb635cf546d5fa6013014a41d93fb618d78c8735df3a959e84ee4

  • SSDEEP

    24576:Jtb20pkaCqT5TBWgNQ7a7SnlFpNPE/xKFk6A:aVg5tQ7a7QoxKi5

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2