Extracted

• • Target

    724-130-2025.exe

  • Size

    1.0MB

  • MD5

    bc0f2d5c7dbef53ed808837aab2855bc

  • SHA1

    98ffde785bd487745dc3f2fc541a86ede25518bf

  • SHA256

    ec1b776abc39b4aa04715898f4f87054d73c9f6b186151390d7c16da234dae43

  • SHA512

    e635e33d6eb8ddab90d1f13c28ab6ff8ecf3e807735e6af1ca280fd542d92c99fff5e22d155c7306987c148d402c89b1359ef19029466a99ef10fa36e741ea4d

  • SSDEEP

    24576:kAHnh+eWsN3skA4RV1Hom2KXFmIa7ll+AzDgWXH4VYHMmV5:zh+ZkldoPK1Xa7l0AvvXet4

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2