Extracted

• • Target

    d67780a7f2fc2ded85c2ccdffdac398e9dac01759260536d61ef40744505ca91.exe

  • Size

    1.2MB

  • MD5

    7d0c3e8ad0c9e73d5fb027a6ab1fd8e3

  • SHA1

    2fcc79b1030844814dde5d595f5b1aee2ed2455d

  • SHA256

    d67780a7f2fc2ded85c2ccdffdac398e9dac01759260536d61ef40744505ca91

  • SHA512

    e3a77e3fc6f9bacfb028ca56e62534de79cc0cc69709d5a8e36bb4d918881d59a2e478a1a21039c1a6f6a924be668c500bd5955869237628246a4802432d9885

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCR3wuPqiUQ8EXQ7ERG0e0IDzAFWhsF:7JZoQrbTFZY1iaCfhRAZt0J7

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2