Extracted

• • Target

    b5428c2846d67943664a3dacc23f81d79eb72840c0af0e335de6726b42a2b27e.exe

  • Size

    77.0MB

  • MD5

    d4f40910302d717a436b72e3acb3b9b4

  • SHA1

    fcb3a4723dceea6d8c41245805e8f5a2027865c3

  • SHA256

    b5428c2846d67943664a3dacc23f81d79eb72840c0af0e335de6726b42a2b27e

  • SHA512

    f552f142eb6a5fc93bf32465cec8c50fd8313f41aa957cae633cb13cb345bc22d0391b5bbfd7478797d1857019d21c7a5d3429039e3e4e87750750dc12812f43

  • SSDEEP

    24576:jtb20pkaCqT5TBWgNQ7azo8bMwaMXx4fD/J6A:gVg5tQ7azoCMwaMit5

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2