Extracted

• • Target

    59371bae08a6c079efc87455c42e730ed71973daf3563105a4fe9480e1a9baf9.exe

  • Size

    77.0MB

  • MD5

    7d5e395c60e21199690dd81c3348a7ad

  • SHA1

    3f8298179dea0b98b7f663ce39172a1c2b874e4f

  • SHA256

    59371bae08a6c079efc87455c42e730ed71973daf3563105a4fe9480e1a9baf9

  • SHA512

    8a5d41b81a1198ab452e627bfabbe0aee9bc7c14f1ed77748a1810da6033099a0c6d40e6b866aef6c004eeb93e7bcb45f7142ffd545583c31f4302e9d471d7f2

  • SSDEEP

    24576:Ptb20pkaCqT5TBWgNQ7aZrYSgOih4ZxAK6A:MVg5tQ7aZ8SgOihi15

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2