Extracted

• • Target

    5c68b2915de0bd72f32898d3eeefb4349f973863b78e5bf74c6db1ec94c29344.exe

  • Size

    77.0MB

  • MD5

    01f9c9f129a9de9d594addb7c32d194d

  • SHA1

    5a6939cfb1c3d920864c9d996da223f0f3eee59f

  • SHA256

    5c68b2915de0bd72f32898d3eeefb4349f973863b78e5bf74c6db1ec94c29344

  • SHA512

    2b2c2cb45cf5b9d5fab6ebb6ea747ba5672fa10f9dc1337961051585c2457cfe045d58a1c0d0d38d250d34f2f7b6dce92b2fbdde2cf3ec200675ee3843285abc

  • SSDEEP

    24576:du6J33O0c+JY5UZ+XC0kGso6Facv3wma2g6Tm0WY:vu0c++OCvkGs9FacfwnJY

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2