Extracted

• • Target

    Потврда-0794111224,jpg.exe

  • Size

    1.1MB

  • MD5

    8b920dc356ed1b1793dcfe00199caa2d

  • SHA1

    daa2eff7c6c782d70734d69246d0e08511b00dc8

  • SHA256

    78cda513bfe7c617e33922c71d93101f76dfaa4d8da9cdd83cfc41ccc1d36ab2

  • SHA512

    5530849739093e8b344be074969f02a737fd5a275b1b22d8c59a0b6ed5eebc895d5a815908f94d381fc302a3d3e919aeee2ab05b8db593f9631382df2bd2f3c8

  • SSDEEP

    24576:ou6J33O0c+JY5UZ+XC0kGso6Fa5ivMkhWY:Cu0c++OCvkGs9Fa5jY

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2