General
-
Target
00ce10d9b88c345825724ce92bb586a2114fd31ca31cc43edca7c937e123ac24
-
Size
1.0MB
-
Sample
241205-vdz1bssrfy
-
MD5
34c3134dc7be9effada0668acdc238b0
-
SHA1
cd69206e6884a5a4a20450d855ce90ca657a9039
-
SHA256
00ce10d9b88c345825724ce92bb586a2114fd31ca31cc43edca7c937e123ac24
-
SHA512
39c30d666f12cb3c847cfd96b591f07961ec8a519ac11465c8eb88f33d09dd10df49c6e4271a0cdb1392ff3ef549ac4334a3d3abe9e811132fcf732a25335d6b
-
SSDEEP
24576:/tb20pkaCqT5TBWgNQ7aj+LCx0Bthb6A:8Vg5tQ7aj+LCSBt15
Static task
static1
Behavioral task
behavioral1
Sample
00ce10d9b88c345825724ce92bb586a2114fd31ca31cc43edca7c937e123ac24.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00ce10d9b88c345825724ce92bb586a2114fd31ca31cc43edca7c937e123ac24.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
vipkeylogger
https://api.telegram.org/bot7157329086:AAGOsSc2V0wvMRyvFFXhUVN6YYkkxDpjHDU/sendMessage?chat_id=7337843299
Targets
-
-
Target
00ce10d9b88c345825724ce92bb586a2114fd31ca31cc43edca7c937e123ac24
-
Size
1.0MB
-
MD5
34c3134dc7be9effada0668acdc238b0
-
SHA1
cd69206e6884a5a4a20450d855ce90ca657a9039
-
SHA256
00ce10d9b88c345825724ce92bb586a2114fd31ca31cc43edca7c937e123ac24
-
SHA512
39c30d666f12cb3c847cfd96b591f07961ec8a519ac11465c8eb88f33d09dd10df49c6e4271a0cdb1392ff3ef549ac4334a3d3abe9e811132fcf732a25335d6b
-
SSDEEP
24576:/tb20pkaCqT5TBWgNQ7aj+LCx0Bthb6A:8Vg5tQ7aj+LCSBt15
Score10/10-
VIPKeylogger
VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.
-
Vipkeylogger family
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-