Extracted

• • Target

    suwce.exe

  • Size

    993KB

  • MD5

    bec536220cd7d3a6e449502f08273664

  • SHA1

    b102bbdefeabc2ec9c84e9fdea7afce6cacf7470

  • SHA256

    471fa9a125c98decd00e727886e5ddf15da64cb1456d29b15c344c4239872167

  • SHA512

    81da4936c04671a6515e59ff8c779c6e8ca68ae9e882a3ef0275784fcd95ac231e18ab5add00c12967511f4a0247037cba76588cc8bff0fceab3b13f118301c4

  • SSDEEP

    24576:3AHnh+eWsN3skA4RV1Hom2KXFmIaG8KvaXu14zq5:qh+ZkldoPK1XaGmXut

  Score

  10^/10

  vipkeyloggerdiscoverykeyloggerstealercollection

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2