Extracted

• • Target

    Dysacousma41.exe

  • Size

    434KB

  • MD5

    02a5a0361a38b5a36c8317be6ec623b5

  • SHA1

    067a07a59f89c2a5f20ab5faedeb8d8ae4435351

  • SHA256

    bbe441a67af04282d87e40898166376a887851fcd6a3e50f508803df093b6fe6

  • SHA512

    78aa7dd3184a0382f49c04bfa511f198d4c7656bc0590bdb7bd61c58c65de8950db5796477a1c160d2da1177e9bef6a0fcde2959845e133b3f43b70dad27ee11

  • SSDEEP

    12288:bch2Fb931uBrzSXrxLOHf7N5yUBFdwyx9fag6vA:bqVBvSXrxLOH5wgFdxyrvA

  Score

  10^/10

  vipkeyloggerdiscoverykeyloggerstealercollectionspyware

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of NtCreateThreadExHideFromDebugger

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/System.dll

  • Size

    11KB

  • MD5

    17ed1c86bd67e78ade4712be48a7d2bd

  • SHA1

    1cc9fe86d6d6030b4dae45ecddce5907991c01a0

  • SHA256

    bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb

  • SHA512

    0cbed521e7d6d1f85977b3f7d3ca7ac34e1b5495b69fd8c7bfa1a846baf53b0ecd06fe1ad02a3599082ffacaf8c71a3bb4e32dec05f8e24859d736b828092cd5

  • SSDEEP

    192:eY24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol+Sl:E8QIl975eXqlWBrz7YLOl+

  Score

  3^/10

  discovery
  behavioral3behavioral4