Extracted

• • Target

    3f9ac29a06c3a7145971c352ecc386b94dc13be8b479d09c920f36e20f6b1b41.exe

  • Size

    624KB

  • MD5

    037b9dc9d5bee07e111173cbe87624b4

  • SHA1

    881d8ba41c222c0ff9ee96dab3e954417da6c34f

  • SHA256

    3f9ac29a06c3a7145971c352ecc386b94dc13be8b479d09c920f36e20f6b1b41

  • SHA512

    5fc5c3794ff87db5d13e2b93c5805f4b17c23aff7d4f348a7634206f88d3814f479d9a73a157e8f01823facf5e70dea831a8725d45171b5e1164397ce2a08433

  • SSDEEP

    12288:OPbTRt0NTO1JKbMDrZrVW+RLV//TSrSv9GDa0YN7vuAwmqG8kL:ybTniTOHmWr5Uq+rSoEduAwmNx

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2