Extracted

• • Target

    cb25ed9e939d551da9473bf9049d9bba3015cee7ba64be72ca658e94c3edaf91.exe

  • Size

    77.0MB

  • MD5

    a5ef9d1622335d439446b07f9f054fce

  • SHA1

    7bc7297d2b29f22f6c41684787c892d1e49d4559

  • SHA256

    cb25ed9e939d551da9473bf9049d9bba3015cee7ba64be72ca658e94c3edaf91

  • SHA512

    8befac347d45965f19158b7c409a6b12b0fe48f2615ea53b820e9e473efad60d7efeba442f52bebc2df29ce7822c0951c423880692aa2c110170e091c5caea4a

  • SSDEEP

    24576:Ftb20pkaCqT5TBWgNQ7aLvre3HXPXlkz3/6A:2Vg5tQ7aLvre3HXP1Uv5

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2