Extracted

• • Target

    Quotation.scr

  • Size

    902KB

  • MD5

    7b935ea77c1c8a3492b94bd38127b0f6

  • SHA1

    b997cc63af4b1737bcca8e9196b5a31c61d4587b

  • SHA256

    3c3ee81b16819a7a161ebac5635d2f2b989ccf93bf4ab7140964dfa581b3b5bc

  • SHA512

    43f0edd9d40ff13112296280561d9d88c8d35fc2c2d7d18a9c591418b527a3ee4da2d3ba3a074bf68f3fc421b5a08862cbcfe30eefc5192c7198d6587a760848

  • SSDEEP

    24576:DMBqKB/5JqlJ9gWo/xOnycS96SuEt9bzeMA8L:DMBqKdqhUgycS8xEDea

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2