Extracted

Extracted

• • Target

    C3A99726270B8BDB50EC74391F81B4009E6D3DEDFB1ACE4BAAAA344268E19F37

  • Size

    1.2MB

  • MD5

    4e7fb712b6378a30717e7f3035ceb7b6

  • SHA1

    3689e20b5f1b3ad0f72084db5b135271e7f8fe78

  • SHA256

    c3a99726270b8bdb50ec74391f81b4009e6d3dedfb1ace4baaaa344268e19f37

  • SHA512

    dfbad75dd71eb3d553a30ed1fc3e1f2f71877d87a012441ba6269417061098dedda198114ff8c4ea7d8ff4800aca1da0e9d9a8dc8d3ef9dc82a9bd35cc6869b8

  • SSDEEP

    24576:eqDEvCTbMWu7rQYlBQcBiT6rprG8aCHaAmUe7DCmq:eTvC/MTQYxsWR7aC6A47

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2