Extracted

• • Target

    678260c46bd3c98dc4cd9340d620b673222933fd02fa88dff158934ffc16f553

  • Size

    1.1MB

  • MD5

    a13a50931a57fd23760344cdb6e55e77

  • SHA1

    68668efa7ed604dc615da8e9e455d9cf717aaa3b

  • SHA256

    678260c46bd3c98dc4cd9340d620b673222933fd02fa88dff158934ffc16f553

  • SHA512

    41b34f52320bccd059c917eea78b5e5d9add2ee244f7e247387a4f74ac61f4a9c243f5818bcbf00ab2c3d4f4925cd8e3a262c7830fb6ea50e2afc4c1532614d1

  • SSDEEP

    24576:7u6J33O0c+JY5UZ+XC0kGso6FaAuRP6THPLZbASWY:1u0c++OCvkGs9FaAgSpAY

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2