Extracted

Extracted

• • Target

    A2721BCE80BC4145D5CB25AFC82EB1D86A4E562D54EB9012BB21C7C233313894

  • Size

    1.1MB

  • MD5

    0726676d10d5ff9baa75cec215db2b6b

  • SHA1

    e801f34d43bf9aad907e006b4f16f3605b57e9ba

  • SHA256

    a2721bce80bc4145d5cb25afc82eb1d86a4e562d54eb9012bb21c7c233313894

  • SHA512

    645117050bd6e6fc21065462adea267e43d91b8313c3c011037c049bdaced1223ac5e72a644425c5d796a834f2d631bbec24adb09b16781eafb643a9a9b36d5e

  • SSDEEP

    24576:wAHnh+eWsN3skA4RV1Hom2KXMmHa8g5TOJIR4iRw5:nh+ZkldoPK8Ya8kl6l

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2