Extracted

• • Target

    6ab84bbff6c143ce6a7a1b0f7132aa20b04b647bf46ba721874c4d605b51c928N.exe

  • Size

    1.2MB

  • MD5

    012f5976a7ae4b752ee6c59985c58b90

  • SHA1

    49fbafd355dec30f0c07d5ac83647aebf1c23713

  • SHA256

    6ab84bbff6c143ce6a7a1b0f7132aa20b04b647bf46ba721874c4d605b51c928

  • SHA512

    ba357a5c0c26becb59662ddab8dc2919b919025d9ff2ce45bdc2900a28a11f9068bf6aa169247e0559d1b8678f5402f0e603f259498061df3557f329edcd7a0a

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCpN1W+toAuoT5g/DFiwzRw+Zn:7JZoQrbTFZY1iaCzgxJoT5KFivKn

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2