Extracted

Extracted

• • Target

    80 Statement of accounts as of Sep 11 2024.exe

  • Size

    1.5MB

  • MD5

    69215f1e56b8d31a118c4377d5e354db

  • SHA1

    151c370535b9e30019c7bbc20763a323fdb93bd9

  • SHA256

    64cd3410815c38b42b406a33697d44ac691ec2f3709ae429b2cc0c9555c4bc46

  • SHA512

    205d4b942a529fc6223affeffd67a71fc408f4685b4aafe7c0eb16b6b8abdda6b866f882c9b92e3fe2eb560cd279516ebc88f0c867a825127a7eb626b2784bea

  • SSDEEP

    24576:wqDEvCTbMWu7rQYlBQcBiT6rprG8aCgWO9ApQAU15R4jIdBfc94Nlk:wTvC/MTQYxsWR7aCgfA415x

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2