Extracted

• • Target

    d1d603468cbebf5aa215f2a2dce10d9326ab2c913fd5dd6e9ba003884581a335.exe

  • Size

    77.0MB

  • MD5

    0ee994344a97494cb401ab3d5c8adfc4

  • SHA1

    e531370efcfd8bd9494d9b19fda321366fcf7a86

  • SHA256

    d1d603468cbebf5aa215f2a2dce10d9326ab2c913fd5dd6e9ba003884581a335

  • SHA512

    bdf53c2e751a7edba03feabebdb29d15eaaa324fdc585e4f1b7ba1849e5e8749e300e276bd2ec9ebb58aa765202e5e20e0c42a9625e94140ef3caa8a60776ffb

  • SSDEEP

    24576:Tu6J33O0c+JY5UZ+XC0kGso6Favs2zIJdZ4gzeWY:9u0c++OCvkGs9Favs2zIfZHY

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2