Extracted

Extracted

• • Target

    e5dea0ef10ebb4aa8bb909e2bcbb6efb37b32e3bd9fed8deeed60a3aa6130d06

  • Size

    475KB

  • MD5

    aff56992589dfb76554ea1416c3e99d1

  • SHA1

    7a3e430720860af04ca1e8d029f60749cd98812b

  • SHA256

    e5dea0ef10ebb4aa8bb909e2bcbb6efb37b32e3bd9fed8deeed60a3aa6130d06

  • SHA512

    642e5d23657efaac332defce18cb87dae389e538188b146d4c2ccb71e3aa882ccf3b82dbb4da48464bb4f4d79a6b1ff5c6690f98088767fde3be6fb2f7fc823a

  • SSDEEP

    6144:OkDVQ0CF04tNSJuhGVJRl3+iRfD5NDtWcKpXIlxGQY6D3ST4vHoGGV8VTCAvM72q:QfYCeDXRKIxGQYT+HimCmZi+1xaIBR

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2