Extracted

• • Target

    65eb2e3cd44c92afba76a1847b4ec063eaf72b62ccfc420d3563e394dfd59797.exe

  • Size

    861KB

  • MD5

    34a202942e6edb7c7680ae13e11d2135

  • SHA1

    6a9230c002570c0d8c6a3b7887c9f62507c06c8e

  • SHA256

    65eb2e3cd44c92afba76a1847b4ec063eaf72b62ccfc420d3563e394dfd59797

  • SHA512

    3d0dceaa1a3581c1cc6ae493fcf5a0bf48b7772b4fa3a775a7512f358efab956ce2917c61f15b2aa928a6b0e388f021259ff7d0b727c71ba1064e1f729e886c5

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCc9OU7VuuYxFMU2S5:7JZoQrbTFZY1iaCcYYKFM25

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2