Extracted

• • Target

    SOA Since OCT DEC 241738316681530012900.bat

  • Size

    259KB

  • MD5

    091339b9b937b6193b28a92975e7d2ae

  • SHA1

    a4f023b841cdf5942908c93d27f33a4fbb0ffb07

  • SHA256

    85a8c769dc1066bc515c68796178c74677e8bfc7a6251688f9f3bccb275df2d0

  • SHA512

    880cf2459dafc438b168e3b3bfe81263bc9c08ce19c36e1f7a35429b72ccb95888435d4fc22efeefea8444a9f52416f4e73db516dd286cbc75f942d9b6942571

  • SSDEEP

    6144:4s39gNPe2hOYtobWZ2OwqvFjOYJziR38Umc:4s3ONP3hkbW9h9OGtlc

  Score

  10^/10

  executionvipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2