Extracted

• • Target

    کپی پرداخت - 19112024,jpg.exe

  • Size

    1.1MB

  • MD5

    2c58e44503ebd5248304565af0ed34ab

  • SHA1

    9a3386a7f64bac977ab65f6d3d9b6ecac75361f3

  • SHA256

    739a86b464bb1710cc2a5cb2b5eee3596a548c962c0f7cc1a8df9b1d0a5bde07

  • SHA512

    253993faae0b49ba37604d41293348bf146e50b3c6e3f1b71e2371e65fa22bca5e8757be805ccbea6700afbbb2a55b1d4f851b55f5074434129b04486a4d0c0d

  • SSDEEP

    24576:ptb20pkaCqT5TBWgNQ7aBznpBjGXYiQ1vk0QlarfKK6A:6Vg5tQ7aBjIYiQ1vkWDJ5

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2