Overview

overview

10

Static

static

10

4408-225-0...ry.exe

windows7-x64

4408-225-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4408-225-0x0000000000C20000-0x0000000000C6A000-memory.dmp

  • Size

    296KB

  • MD5

    6971e9c24017ab72569574061b22a854

  • SHA1

    e2de1531efe51b65e83308065b2f22347dffffa2

  • SHA256

    1fe4b68779affb65536853840e7f8213635d2e00ea2eab2d9c01cf11610f90a7

  • SHA512

    2dc6f446b60a6833d0f5562c666caddbc3c4791e8938f8ed5d763eead39ddfab55efb92d876d15e48cdc3aefcb37731f773ea3b331c00b8eaa3501c2d1aa79bb

  • SSDEEP

    3072:+i8zGMcOGgRcO+X+uSeSQShSySXS5S3VXmNqpxKdks/3pH4n3TtabfOK3qfmiLQ7:vVtVuZJ/QtCIDo3K3T8bRizb

Score
10/10
keyloggerstealervipkeylogger

Malware Config

Extracted

Family

vipkeylogger

C2

https://api.telegram.org/bot7745751910:AAGY46QDCTWO_Pw9iDqZhkNij-i4uwbMgzE/sendMessage?chat_id=7695061973

Signatures

  • Vipkeylogger family
    vipkeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4408-225-0x0000000000C20000-0x0000000000C6A000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections