Extracted

• • Target

    7fa22b85393f2045a519e6e0012fac35c8e94c7884fbc25ef8fdd9306ca33107.exe

  • Size

    77.0MB

  • MD5

    ad57b364506b187c1db1462187b68406

  • SHA1

    759198debabf6c09ae4a33f2cd1d0a101e53ec26

  • SHA256

    7fa22b85393f2045a519e6e0012fac35c8e94c7884fbc25ef8fdd9306ca33107

  • SHA512

    3888a7f3e12f0d21819137ad84aec1c97763f34ba645dbd5f80a8210502370df0acb933eb56c221197ce6fa53f123a9b60705672023b29ee3a6a46b613e753f6

  • SSDEEP

    24576:su6J33O0c+JY5UZ+XC0kGso6FavwhWe5w1AOZKWY:2u0c++OCvkGs9Favwh1am8Y

  Score

  10^/10

  vipkeyloggerdiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2