Extracted

• • Target

    04D45FC74A513C8A654D0C2FBAAB5BFEDD6EABC719134BAB1681B7E7E105132D

  • Size

    999KB

  • MD5

    8ab2f180416f86f3ab1f71e5fd5e53ce

  • SHA1

    4f70dcce4e0bf9e9a007f19c4f87781ad4ec30b5

  • SHA256

    04d45fc74a513c8a654d0c2fbaab5bfedd6eabc719134bab1681b7e7e105132d

  • SHA512

    4590edc9ac66b46a8a1e9bc105d247f623065321602eec58e550c5736f29ef1701dcf4477c425fc1910c81f4215aa25980746414c30796da274adbddb85a1e5c

  • SSDEEP

    24576:VAHnh+eWsN3skA4RV1Hom2KXMmHaOA1L8fZi2jg5:Eh+ZkldoPK8YaOcL8fs2y

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2