Overview

overview

10

Static

static

1

PO202501F.exe

windows7-x64

10

PO202501F.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99bdd17942ceb530cca3a05bf80a1f6a01cc938a90bfc8ececa680503669bfde.zip

  • Size

    237KB

  • Sample

    250123-eht2wa1lhx

  • MD5

    26a8c5d3d6fa03a32110d0ac82d2eed8

  • SHA1

    80a409d9f3578c1b8abb1780a2f9afd342c12f8f

  • SHA256

    99bdd17942ceb530cca3a05bf80a1f6a01cc938a90bfc8ececa680503669bfde

  • SHA512

    1f2d4a528ea6b3964d91cb857fe93656ca205127a148cf192f6066073d6c48abcb79ba2ae00cdadb167a7743ecfa70fa217287449c9d89bbcbf97669829b3ffb

  • SSDEEP

    3072:nK64PXNxYzywuUVuZpsIFtGjdMdOJkmTMxW65gyvhMOQ1IOWV8LNhUVEvOHDhdcL:yNxYGPnFtE4Cxgxq1IOWpevwlkCEb5z

Score
10/10
vipkeyloggercollectiondiscoverykeyloggerstealer

Malware Config

Extracted

Family

vipkeylogger

C2

https://api.telegram.org/bot7965348925:AAGe8wdrvk9A3lxr1GIjGigodJ_zZ7prhfs/sendMessage?chat_id=6848903538

Targets

    • Target

      PO202501F.exe

    • Size

      615KB

    • MD5

      a70322c6cc4b2cf7b2e21e54eaa49643

    • SHA1

      3da33eb5a8bcdbc578b56984d9883c598f3786c1

    • SHA256

      ceba2c86afbcafec83c35c4a501db488ededa75515d55df652aa22ac9bc9dac6

    • SHA512

      accda190a6ab65b2a5929cf17eea28b3812858b0a629a6aa92e5b41c8cd1d1d183763ec7c59abd800ffdedb0b06006a36a30a6f875c08a7279d456090ea60124

    • SSDEEP

      12288:hQUqaxXOuZv5s2PIbZyxyLUL+z14JqY+W6Y6Y4CYYYY4pYYYYdYYYYwYYYYaYYYn:hQUnZa2wbZyxyLG+z1VY+W6Y6Y4CYYYQ

    Score
    10/10
    vipkeyloggercollectiondiscoverykeyloggerstealer

    • VIPKeylogger

      VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

      stealerkeyloggervipkeylogger

    • Vipkeylogger family

      vipkeylogger

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks