Extracted

• • Target

    f8dbe5f1422710a57a7cbce1bedcfaab71b4c2442fe1db24775c397add8d3184.exe

  • Size

    1.1MB

  • MD5

    ce0a37ba4557511935e7b96610ab7b71

  • SHA1

    194120518380610d52a3a2479a867c17bfddff4b

  • SHA256

    f8dbe5f1422710a57a7cbce1bedcfaab71b4c2442fe1db24775c397add8d3184

  • SHA512

    c7906a773d7d4856c113c1143e9a21647612e55ad56c7dfd5eb6a706cc05eba4cbf328680a2d6310e34d77f48959ca7b0679452b2ce297e1ad73f03d4d9e1541

  • SSDEEP

    24576:HqDEvCTbMWu7rQYlBQcBiT6rprG8aWHBvjCFszZ:HTvC/MTQYxsWR7aWUSz

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2