Overview

overview

10

Static

static

5

2E9A793C02...10.exe

windows7-x64

10

2E9A793C02...10.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2E9A793C02AAE5B3DD4119D9FFA2A57437D9B00D3D931AEB89EDE5C65FAF2610

  • Size

    1.0MB

  • Sample

    250103-jnjkjsxnhl

  • MD5

    bd02464d75221ac0da2289e15fca49c9

  • SHA1

    0049673eddb7689c594d0dceea9cefb56b1d1ab0

  • SHA256

    2e9a793c02aae5b3dd4119d9ffa2a57437d9b00d3d931aeb89ede5c65faf2610

  • SHA512

    50c37d80b9753b92f7375d5c6a1f4115bebeefd9629982fb7de7b1315d5c41bc141bae5f56de0b4b8bace7428fc56770b8ecb0b47f43e63cefcdf45447e2c9bc

  • SSDEEP

    24576:YAHnh+eWsN3skA4RV1Hom2KXMmHaTfNuuQ7L1g5:fh+ZkldoPK8YaTfBQ7L4

Score
10/10
vipkeyloggerdiscoverykeyloggerstealer

Malware Config

Extracted

Family

vipkeylogger

C2

https://api.telegram.org/bot6392998330:AAEoU34KkrBXWdYsC0HHJhwWS-tXdCQBgic/sendMessage?chat_id=6386262734

Targets

    • Target

      2E9A793C02AAE5B3DD4119D9FFA2A57437D9B00D3D931AEB89EDE5C65FAF2610

    • Size

      1.0MB

    • MD5

      bd02464d75221ac0da2289e15fca49c9

    • SHA1

      0049673eddb7689c594d0dceea9cefb56b1d1ab0

    • SHA256

      2e9a793c02aae5b3dd4119d9ffa2a57437d9b00d3d931aeb89ede5c65faf2610

    • SHA512

      50c37d80b9753b92f7375d5c6a1f4115bebeefd9629982fb7de7b1315d5c41bc141bae5f56de0b4b8bace7428fc56770b8ecb0b47f43e63cefcdf45447e2c9bc

    • SSDEEP

      24576:YAHnh+eWsN3skA4RV1Hom2KXMmHaTfNuuQ7L1g5:fh+ZkldoPK8YaTfBQ7L4

    Score
    10/10
    vipkeyloggerdiscoverykeyloggerstealer

    • VIPKeylogger

      VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

      stealerkeyloggervipkeylogger

    • Vipkeylogger family

      vipkeylogger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks