General
-
Target
04017385f3c4b8858022a5952b59089a66a59830a4c5443bdb83e6168631b3b4.exe
-
Size
77.0MB
-
Sample
241205-tasw6sxlfq
-
MD5
8bcb70565d9d32c3466fb9b56bfcf96b
-
SHA1
e85c2b8ae6feb421143e44d441d6abc79426c2bc
-
SHA256
04017385f3c4b8858022a5952b59089a66a59830a4c5443bdb83e6168631b3b4
-
SHA512
ee9bbb8c50870cda04030aed6aa18b0a2338ac3f67bce66d7d10e74c0874075700397befda1806b626545edf917e9cc787c6740267502d3a373dc649e4d6aaef
-
SSDEEP
24576:jtb20pkaCqT5TBWgNQ7aG6It476J5WCL/6TY6A:gVg5tQ7aGJpn/J5
Static task
static1
Behavioral task
behavioral1
Sample
04017385f3c4b8858022a5952b59089a66a59830a4c5443bdb83e6168631b3b4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04017385f3c4b8858022a5952b59089a66a59830a4c5443bdb83e6168631b3b4.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
vipkeylogger
Targets
-
-
Target
04017385f3c4b8858022a5952b59089a66a59830a4c5443bdb83e6168631b3b4.exe
-
Size
77.0MB
-
MD5
8bcb70565d9d32c3466fb9b56bfcf96b
-
SHA1
e85c2b8ae6feb421143e44d441d6abc79426c2bc
-
SHA256
04017385f3c4b8858022a5952b59089a66a59830a4c5443bdb83e6168631b3b4
-
SHA512
ee9bbb8c50870cda04030aed6aa18b0a2338ac3f67bce66d7d10e74c0874075700397befda1806b626545edf917e9cc787c6740267502d3a373dc649e4d6aaef
-
SSDEEP
24576:jtb20pkaCqT5TBWgNQ7aG6It476J5WCL/6TY6A:gVg5tQ7aGJpn/J5
Score10/10-
VIPKeylogger
VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.
-
Vipkeylogger family
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-