General
-
Target
83956a9172e9f9119d14621de7e43905348c617e58bd7af09342f00279c50077.exe
-
Size
77.0MB
-
Sample
241205-t6a18sspbv
-
MD5
1ff110b334748c5eaa26b88616afe30f
-
SHA1
470f119a6fe0b75995220b3c38e49b3359a54e33
-
SHA256
83956a9172e9f9119d14621de7e43905348c617e58bd7af09342f00279c50077
-
SHA512
29bf62d0a6550084072e113ccf564b6770cdfd4d97c6017cc80189fa3fc14cba43b9ebb651e24d4b63bc755f2609b99703757e8bd1134f6801aa61d32c6e1a61
-
SSDEEP
24576:Dtb20pkaCqT5TBWgNQ7acNXWi+37r7q6A:AVg5tQ7acE9Lru5
Static task
static1
Behavioral task
behavioral1
Sample
83956a9172e9f9119d14621de7e43905348c617e58bd7af09342f00279c50077.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
83956a9172e9f9119d14621de7e43905348c617e58bd7af09342f00279c50077.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
vipkeylogger
Targets
-
-
Target
83956a9172e9f9119d14621de7e43905348c617e58bd7af09342f00279c50077.exe
-
Size
77.0MB
-
MD5
1ff110b334748c5eaa26b88616afe30f
-
SHA1
470f119a6fe0b75995220b3c38e49b3359a54e33
-
SHA256
83956a9172e9f9119d14621de7e43905348c617e58bd7af09342f00279c50077
-
SHA512
29bf62d0a6550084072e113ccf564b6770cdfd4d97c6017cc80189fa3fc14cba43b9ebb651e24d4b63bc755f2609b99703757e8bd1134f6801aa61d32c6e1a61
-
SSDEEP
24576:Dtb20pkaCqT5TBWgNQ7acNXWi+37r7q6A:AVg5tQ7acE9Lru5
Score10/10-
VIPKeylogger
VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.
-
Vipkeylogger family
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-