Extracted

• • Target

    173260890731de59c5efad150425b91227bfd141970725ea0b2bb1ec29e5892bd389928c3c633.dat-decoded.exe

  • Size

    203KB

  • MD5

    17fde190e651aee3335ed55eeaa1a6db

  • SHA1

    8bb498b5d6fc4a58043d9e51d80790083cecd1f7

  • SHA256

    a7e6101a68d513260f4e380b8d9bc66f90cee222d6ef157201884f6f32ce4cf3

  • SHA512

    f4df0edfe99784bddad1ae3f275afe1d3dbff0a2d75531de9771558e97f60621353dbd08f6369e7c41feb38fdf2760737a4ca5da68110cef44bd5320ec7ab97f

  • SSDEEP

    3072:UDKW1LgppLRHMY0TBfJvjcTp5X+5y76khunx2ZZg1sl7bYk:UDKW1Lgbdl0TBBvjc/+5yGkYnx+gKlbH

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2