Extracted

• • Target

    227f6ffec17185b0f15ef324705b35ab5859020ed58345ff63c59dbd5f1a0781N.exe

  • Size

    1.1MB

  • MD5

    1aefaa71b8996d22cad66a84a7f279a0

  • SHA1

    4ec6f2fe363b2c5422f684c0c2abfdaddc25b781

  • SHA256

    227f6ffec17185b0f15ef324705b35ab5859020ed58345ff63c59dbd5f1a0781

  • SHA512

    67081cf6ea7a56764b8d97610c69747b6ec352ea5b7c18ef717124d8b926c6394746aad22c8590920479b9c8c8c0158ed9e0e320562e943a2e81f129af615164

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QLMwDMZE4mqu6p0DWsRmic2V993wZCA:f3v+7/5QLMLE2hq93wP

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2