Overview

overview

10

Static

static

1

PO202501F.exe

windows7-x64

10

PO202501F.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    afafc4178154c86f4eff17a3a6ee0a1f7a1ea201a03f43c3ff1b0109539092aa.zip

  • Size

    300KB

  • Sample

    250117-g5ea2svlgz

  • MD5

    86bbc76750f1e1edf0eab9cf7fd2a1cb

  • SHA1

    a544d0eba088c1734013f8355b2f3f4ea2f9e5a4

  • SHA256

    afafc4178154c86f4eff17a3a6ee0a1f7a1ea201a03f43c3ff1b0109539092aa

  • SHA512

    992279a3ef775b6d7f1b02a45ae1e5c5132f84f8df3ec48c2722ca62c6c3be2e2ff173ffd06bd657c1044105c2a18d79bbe8a31068db76414901c16185daea48

  • SSDEEP

    6144:ViX4hRYFSqkESxMaWEpsuPFD+AJPoOnLXMb0ufLPMRpNvASW5aW9NtaSl:coLYFSqCxMCprlJxR0MP1PkvL

Score
10/10
vipkeyloggercollectiondiscoverykeyloggerstealer

Malware Config

Extracted

Family

vipkeylogger

C2

https://api.telegram.org/bot7965348925:AAGe8wdrvk9A3lxr1GIjGigodJ_zZ7prhfs/sendMessage?chat_id=6848903538

Targets

    • Target

      PO202501F.exe

    • Size

      2.8MB

    • MD5

      0dd5014d304efb43d1ad1e58c746b96c

    • SHA1

      01eb15c06ec35175e23c079d02ec27806bdc5580

    • SHA256

      70fccd712c0675bda276231e600928b9a3bda595719e95adc5fb2b847b156bf9

    • SHA512

      e9344b3aaa9cb5961b3dd8ae145c7dabbbb96104292ee9a9ed0e8ad4e0573c4446ea36568c4b2ca88a244fb5d299a4e549c086ab9faca5ba777ad6831620c7c2

    • SSDEEP

      12288:pub1M1KYjZUnVZdAAaRgsYakHc5pgHApi3yQsXu/CV7O:pubi1DIDAVRgsSHsgHAhQsVV7O

    Score
    10/10
    vipkeyloggercollectiondiscoverykeyloggerstealer

    • VIPKeylogger

      VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

      stealerkeyloggervipkeylogger

    • Vipkeylogger family

      vipkeylogger

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks