General

  • Target

    2644-32-0x0000000000400000-0x000000000044A000-memory.dmp

  • Size

    296KB

  • MD5

    70e58ac2577231d4ef3e532bc882160a

  • SHA1

    826ef3e15f849d16cd7a782211eda4b929f2942d

  • SHA256

    d9bc578935195fdaa058ffef2e371eda75105d6f343b92761220b9824e736544

  • SHA512

    89de3a2cc22e0fb26e79327a001102905dadd5dbb3f3a97e22af13ef4f428360f133b7161d161d3721b6b585a21785b90a68567bf26930a67e256b566c160f4b

  • SSDEEP

    3072:rsthQKPxT727Mxv0X/Siuyrjhv4TVL5bm9A0QrD6GLwi7hI8W2b71/6DlSOhmdsB:6CD0Wb8Tb8lub

Malware Config

Extracted

Family

vipkeylogger

Signatures

  • Vipkeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2644-32-0x0000000000400000-0x000000000044A000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections