Extracted

• • Target

    c081714907fc943cff0b637123039aff0237a226de4fb171cf430ed7c1da1163N.exe

  • Size

    841KB

  • MD5

    ff0c39560bbe39e434266a93dffaa680

  • SHA1

    b553242c24301d7afef118b4eb87bc0d4489b182

  • SHA256

    c081714907fc943cff0b637123039aff0237a226de4fb171cf430ed7c1da1163

  • SHA512

    1484922273850b0c2f8375ca6e551031936fa90f6ee9d3330556327ff8f0d092fe6cfc1ba698682d93a6ab2b9fe89edc575da4612d5ac8fa7b9c194ed8b0c2d2

  • SSDEEP

    24576:4fPa89iWz9Gcg/GMEcCxTRplSZ98H+HdPHdTSkc14:uaOk/GVcCdXsZCH4

  Score

  10^/10

  vipkeyloggerdiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2