Extracted

• • Target

    0A5999BA1DA76AA2C62E40A870776DBECCA1F506D987D57A3D5AFFF9580C96B4

  • Size

    1.2MB

  • MD5

    5f04bf05eec447538a2c6c18a1af5c9e

  • SHA1

    2e60da672fa2de58f93a1ad056b60ea5685d11c1

  • SHA256

    0a5999ba1da76aa2c62e40a870776dbecca1f506d987d57a3d5afff9580c96b4

  • SHA512

    76e2050ab204e753de00abcf9c9ca1139c3c065e87d359d3364c5535445b37bb2866e67e434b38c89fa9058dd7ab09cc692f7c099740f5268ca96a03e792ff6e

  • SSDEEP

    24576:WfmMv6Ckr7Mny5QE/nh2pniYP1FUVNk/q:W3v+7/5QE/nM1PON5

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2