Extracted

• • Target

    Payment Notification PDF.exe

  • Size

    1.0MB

  • MD5

    80fb946e2d8d53ddf412d59d61bf83ab

  • SHA1

    8b7da84b92c61858eeb56410e05b208d885560e9

  • SHA256

    374b9a35bb8495f8de85a828224b6c1305ada58ca35d68798eb8e3ff9ec1d3a4

  • SHA512

    ba245097cdfbf2c13e8e99bedf2d46e3e6190b337a0b015077005d2a17f813e19fa9c0feab47c9dea45b019c49e5a067cf382ab5a61d135d108dd89e0adcb2d2

  • SSDEEP

    24576:Uu6J33O0c+JY5UZ+XC0kGso6FaInRgdQUyWY:uu0c++OCvkGs9FaIaY

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2