Extracted

Extracted

• • Target

    c05ab375243499db0c1d595a6a7f4249e9831fb6b369ca1706aabac5b60a27a8.exe

  • Size

    203KB

  • MD5

    7455fa9cb790aba2a0b149337cd0629a

  • SHA1

    e7217859b464420f73bf0b16df32f5c5f2207a60

  • SHA256

    c05ab375243499db0c1d595a6a7f4249e9831fb6b369ca1706aabac5b60a27a8

  • SHA512

    06dfd47a1dbe3b32ffce3b5a882d45ee768971d3e9b478a35f28e043fbf1f41672b5ff94c712fbb8ad95809be641eb20443281b1ab139a9e51bd8d78b6562012

  • SSDEEP

    6144:iDKW1Lgbdl0TBBvjc/Cy5lTREoWbBAqb9:kh1Lk70Tnvjc6gGTz9

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2