General
-
Target
Teklif Talebi İhale No_14991_PDF.exe
-
Size
1.1MB
-
Sample
241204-q2zbgsxkfw
-
MD5
f0fadc1fc5492e928e1b0f1110910dc3
-
SHA1
b5b3829ef9e5b94c00acc84be0a9054c98cd57d0
-
SHA256
93cc7fdbc44befd6926f08604df3baea4698df845cb80d97f026eb5481341861
-
SHA512
2f185f8c33301e7e7db59e6e26ebe2703a3a6cf9dd85eda837f5597d17af450f956574286b73a92d8eebd94552927ef3240d6ed317768662be3220ed6a7b31b3
-
SSDEEP
24576:vu6J33O0c+JY5UZ+XC0kGso6FaNQk2kARqoZzpWY:Zu0c++OCvkGs9FaNQkGR9eY
Static task
static1
Behavioral task
behavioral1
Sample
Teklif Talebi İhale No_14991_PDF.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Teklif Talebi İhale No_14991_PDF.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
vipkeylogger
Targets
-
-
Target
Teklif Talebi İhale No_14991_PDF.exe
-
Size
1.1MB
-
MD5
f0fadc1fc5492e928e1b0f1110910dc3
-
SHA1
b5b3829ef9e5b94c00acc84be0a9054c98cd57d0
-
SHA256
93cc7fdbc44befd6926f08604df3baea4698df845cb80d97f026eb5481341861
-
SHA512
2f185f8c33301e7e7db59e6e26ebe2703a3a6cf9dd85eda837f5597d17af450f956574286b73a92d8eebd94552927ef3240d6ed317768662be3220ed6a7b31b3
-
SSDEEP
24576:vu6J33O0c+JY5UZ+XC0kGso6FaNQk2kARqoZzpWY:Zu0c++OCvkGs9FaNQkGR9eY
Score10/10-
VIPKeylogger
VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.
-
Vipkeylogger family
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-