Extracted

• • Target

    SKMINV_021820.exe

  • Size

    985KB

  • MD5

    31cf398cc825179e2de68a6016650fe0

  • SHA1

    642a81cdff887f6971432f52e8a7188ed7fa4756

  • SHA256

    1e295bf3238ae4405f5d08931664c0f24302bf08afc435f7b86976156459d101

  • SHA512

    beda48234081383d3264163f0110e417e66a19c67cb272b2b0c91eba26e23259f6acb1b45389bc7b1bf5325a7003440132185e05b9488032020bc2680cc2d604

  • SSDEEP

    24576:au6J33O0c+JY5UZ+XC0kGso6FaIrZDzM0w8WY:su0c++OCvkGs9FaIlDzMJY

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2