Extracted

• • Target

    noah s crypt.exe

  • Size

    1.1MB

  • MD5

    1a74dbd880003ff0dfcc93dd83631743

  • SHA1

    c9bc0027273ad74ff97d1d7b8a0668e5e750a604

  • SHA256

    63f122de6bc1f877eccfddb4a3a34b93177203cdd3b906e02f6045d71917dd34

  • SHA512

    ed2c727b17db2d77e8ef79263b838bdb777bc71c0a2588e8b818c0f34d550c9b8b73b969b9f5a8ccb6abee5cd0bfd5699ebe108609ae646093f01bea643f123b

  • SSDEEP

    24576:Pu6J33O0c+JY5UZ+XC0kGso6FahQoisynLIJ9HWY:5u0c++OCvkGs9FahQoTcEoY

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2