Extracted

• • Target

    90e512c7bcc7ff595750229a34b01cdaea4fb77bb688c24192c92096b0848111

  • Size

    1.1MB

  • MD5

    4d38479abf0d0ee8572ca00111eb4ba6

  • SHA1

    63561cec13d57f47c4080d8de431b9f659874c64

  • SHA256

    90e512c7bcc7ff595750229a34b01cdaea4fb77bb688c24192c92096b0848111

  • SHA512

    904f832031f4edd6ead12015bc93002792ad78a0095002708445bf626aaa5e4286c6cf3b648eb00e1a9c028dce987fde83ab23e2ed7e7987774d931bfc952a34

  • SSDEEP

    24576:Wtb20pkaCqT5TBWgNQ7aWEvuvWHeImSG/CXwGS6A:DVg5tQ7aWEWvDLSRC5

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2