Extracted

• • Target

    OVERDUE INVOICE.exe

  • Size

    810KB

  • MD5

    f50c1b50e1c3819603ed8a59e9326847

  • SHA1

    162a6906470e37e7ef7031cf11717de943d5d3b8

  • SHA256

    7daa889b5b5657f30d137070cc47cd74bab163061dbfe09b6e8fcabd23f94668

  • SHA512

    49627b4ba38eb921b33d44205c6dafe81868e27f94e2c7ba6abb5ac2af258849ec6e7f0af9591040afb5118f09cd84196d1e0ab35c7b14a61f8d045f72f1f6e4

  • SSDEEP

    12288:1ig9YRZPIy9PEugnCygfryb3G4WBVhvvPrlxzDv4M6bqOi:YYsZPpPEug3h24WBV9XrXgM6T

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2