Extracted

• • Target

    RFQ SHEET PX2 MULE25 SHENZHEN LUCKY.exe

  • Size

    1.0MB

  • MD5

    16b502d5e12936ef986ccf61ea9a2f77

  • SHA1

    96129f50be1e6e43dcc166122a1391748a6c5d62

  • SHA256

    615be2fbf9581924f6e94a7b59e769c89d25d81bbdc6eba61cec4ef0c29d0cc1

  • SHA512

    45f3fa80119dc01bfa57a3d5c1eac8ce407afcb173c1d525213acaa9e843324c5e4b0842f65f4659daec4920ee804b4868fb0f08f095b1f766028eb4431f5b5e

  • SSDEEP

    24576:qUS8CVo3A9Lc7PYKKCMpCcUsVEvfJFLIs7Q:eji4cDYEMgB0p

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2