Extracted

Extracted

• • Target

    ea39cad9fa9be734f2c7281620c60209da9d6985dba240945b33ce8073f94fc9N.exe

  • Size

    626KB

  • MD5

    76871738c52a0704d8e1c424752ecd60

  • SHA1

    b7c38605b7c9d96a5d9ad7def5e0094a7937021f

  • SHA256

    ea39cad9fa9be734f2c7281620c60209da9d6985dba240945b33ce8073f94fc9

  • SHA512

    9e6936ddb07fa9308ea0b19224f56745c00dff12d332c74e885982f3df070bd9e1c7ae392f2f62b609637ce2330330796e9eaf65c6eacddb5b573e3b49933b22

  • SSDEEP

    12288:AORXHVTaXU/mlQF0FAIxlMZSkNyAJJjB55EQPzMmN:AORlTaXUVaqJhJjB37PzMC

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2