General

  • Target

    544-103-0x00000000010B0000-0x00000000010FA000-memory.dmp

  • Size

    296KB

  • Sample

    250223-rex1kszphy

  • MD5

    1ab2d0389d49246d71f08ee3e13ebdff

  • SHA1

    ec16bb3d710a20e1c9b051aacb9971a1da71c707

  • SHA256

    8f2c955489671aeb79934fd375f0dfff3fe149ec93782f3cd31438538a62ab51

  • SHA512

    b9d6bcea7a8b65dac6da3a9a8c456e1d2eab2d448d7144d6580ea282d2d500f397508221ae1e1359cac8ca08f69b1b2dec0ad6b18947120689e0df773b59c340

  • SSDEEP

    3072:IbbOAI6D2D/F/+h6f1+WL+r7QXuBAYM9W1QuV0d/2b7/zr/miLZYTKBgfi4bbY:vdJ2Kdebv96b

Malware Config

Extracted

Family

vipkeylogger

C2

https://api.telegram.org/bot7976785364:AAG01E14p5lnc2jDViau5TEAhyIxlJZ0CRE/sendMessage?chat_id=7804674933

Targets

    • Target

      544-103-0x00000000010B0000-0x00000000010FA000-memory.dmp

    • Size

      296KB

    • MD5

      1ab2d0389d49246d71f08ee3e13ebdff

    • SHA1

      ec16bb3d710a20e1c9b051aacb9971a1da71c707

    • SHA256

      8f2c955489671aeb79934fd375f0dfff3fe149ec93782f3cd31438538a62ab51

    • SHA512

      b9d6bcea7a8b65dac6da3a9a8c456e1d2eab2d448d7144d6580ea282d2d500f397508221ae1e1359cac8ca08f69b1b2dec0ad6b18947120689e0df773b59c340

    • SSDEEP

      3072:IbbOAI6D2D/F/+h6f1+WL+r7QXuBAYM9W1QuV0d/2b7/zr/miLZYTKBgfi4bbY:vdJ2Kdebv96b

    Score
    1/10

MITRE ATT&CK Matrix

Tasks