Extracted

• • Target

    673c10b2e5531ce44967dbf32ded5fa555643012fda3ba3b6bca2c7bed7fa427.exe

  • Size

    77.0MB

  • MD5

    ca18699690bc15aeb2c6b58d88ced529

  • SHA1

    8dcc032986e1c817adeb3d7ed8f351f914ab43e2

  • SHA256

    673c10b2e5531ce44967dbf32ded5fa555643012fda3ba3b6bca2c7bed7fa427

  • SHA512

    7931e99831e814e9ad0d4beb5bf22add5723480012b9ef7d8ccbdd9e89f8d27550b47be0cd0450e933dd7c7975e1afcce85057378a57e468b4ddf6fff149b3e2

  • SSDEEP

    24576:btb20pkaCqT5TBWgNQ7avZCmfATUOuBHQ6A:YVg5tQ7avZnOua5

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2