Extracted

• • Target

    0a1f4b0a9d8939e09986ff90633a4761c46b420ee6046c705ae779dd09afaf73.exe

  • Size

    77.0MB

  • MD5

    f33722ccd93260e70bcf81e6ed60203f

  • SHA1

    484366ee7aaf644fcd08316ce81e7159169aeb95

  • SHA256

    0a1f4b0a9d8939e09986ff90633a4761c46b420ee6046c705ae779dd09afaf73

  • SHA512

    8dddd94ce64987c85e7f63b2b04e2fb8fd5d84345c57e40e2ef8d04a71554ba3f2e82abe28ce0f3a58132522cc2bdc086a2b1ae7e72ddc8aed9d4f500bd86c23

  • SSDEEP

    24576:Ctb20pkaCqT5TBWgNQ7acie1TaJD+pYkZ4M6A:PVg5tQ7ac91TUDzkH5

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2