Extracted

• • Target

    62782fc2de36b6fee92031a5c90e8e6e2a91da87ca67e6b17930a69fd3b33fd0N.exe

  • Size

    1.2MB

  • MD5

    130b5fc6866049d4fba7191e64de45c0

  • SHA1

    ab603c90b0cc23574f3b3c92fd66a808b0778119

  • SHA256

    62782fc2de36b6fee92031a5c90e8e6e2a91da87ca67e6b17930a69fd3b33fd0

  • SHA512

    48b66f835e865040866ef15a866d608fdc48f3604a22f738c2d07527242973794f09e142da73e7e69ed40387cdba9a0c608514179da7e22bd9aedd98cb18455b

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCGNd+EvsPTXPYt7g/tNdXMf9Abe0lkl:7JZoQrbTFZY1iaCGNd3vkXPFRXMfibeR

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2