Extracted

• • Target

    AB60F1334AFC6713387192FF674A6904687F23C1E704EB9E681DC17154EC6164

  • Size

    1.1MB

  • MD5

    d3db3591921c3250bed8973ca5700389

  • SHA1

    019101e102e709c94f91aa8f1f51751dc032bb68

  • SHA256

    ab60f1334afc6713387192ff674a6904687f23c1e704eb9e681dc17154ec6164

  • SHA512

    864ca31c847633470c0c888edb8e52d365da2aeb925e05e8e246774614dcf50957f680dca02494c5a3edf8874b35bef8788b2bdccb68f9be4c8e173d445fae6f

  • SSDEEP

    24576:bAHnh+eWsN3skA4RV1Hom2KXMmHaI13dOpq9kPDwkjg5jl5:2h+ZkldoPK8YaILn9kPkkjq

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2