Overview

overview

10

Static

static

5

3D134D4900...24.exe

windows7-x64

10

3D134D4900...24.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3D134D49001A39CD3A83CC3983943D567B1393415DDFAF88C2ACCAC2F3756124

  • Size

    1.0MB

  • Sample

    250103-jnmxzavkd1

  • MD5

    26b80fbeb1946a4fb199731c1359ef69

  • SHA1

    4afc002c365e827a27b02a6713e2213678a5d0f4

  • SHA256

    3d134d49001a39cd3a83cc3983943d567b1393415ddfaf88c2accac2f3756124

  • SHA512

    64ce159c4b8e7803205c060585ff97a4c7cc3965b9221f36b292c379b5caf9a44d7f9ba0b6aab50324072793999adf865607001a9e25010bd56b4b4ac22b0b76

  • SSDEEP

    24576:AAHnh+eWsN3skA4RV1Hom2KXMmHaccMQF4mS85:3h+ZkldoPK8Yacm4mR

Score
10/10
vipkeyloggerdiscoverykeyloggerstealer

Malware Config

Extracted

Family

vipkeylogger

C2

https://api.telegram.org/bot6392998330:AAEoU34KkrBXWdYsC0HHJhwWS-tXdCQBgic/sendMessage?chat_id=6386262734

Targets

    • Target

      3D134D49001A39CD3A83CC3983943D567B1393415DDFAF88C2ACCAC2F3756124

    • Size

      1.0MB

    • MD5

      26b80fbeb1946a4fb199731c1359ef69

    • SHA1

      4afc002c365e827a27b02a6713e2213678a5d0f4

    • SHA256

      3d134d49001a39cd3a83cc3983943d567b1393415ddfaf88c2accac2f3756124

    • SHA512

      64ce159c4b8e7803205c060585ff97a4c7cc3965b9221f36b292c379b5caf9a44d7f9ba0b6aab50324072793999adf865607001a9e25010bd56b4b4ac22b0b76

    • SSDEEP

      24576:AAHnh+eWsN3skA4RV1Hom2KXMmHaccMQF4mS85:3h+ZkldoPK8Yacm4mR

    Score
    10/10
    vipkeyloggerdiscoverykeyloggerstealer

    • VIPKeylogger

      VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

      stealerkeyloggervipkeylogger

    • Vipkeylogger family

      vipkeylogger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks