vkeylogger | 6b0936605c05ecd3e9658d3acfb9195893924778f3a41b2f74187de30a9af352 | Triage™

Login
Reports

Overview

overview

Static

static

3

6b0936605c...52.exe

windows7-x64

6b0936605c...52.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
6b0936605c05ecd3e9658d3acfb9195893924778f3a41b2f74187de30a9af352.exe
Size 217KB
Sample250227-dsawbasxg1
SHA256 6b0936605c05ecd3e9658d3acfb9195893924778f3a41b2f74187de30a9af352
MD5 57932aab8116c9d1201cd56365d9b2c3
SHA1 3f249a42d82a1bdd5c15cb3c3b5c4cd968ec776c
SHA512 e0bdff8fe0b557a89da2b2aca5ca844d2d6855537b950ce5a3bf46a7548fc4030f9239892a87086325cf1f9a37f4e14c939f144b6302fd3426da543515edefd9
SSDEEP 3072:6eOjLpXVvSmdws9/WIdGTYoHoQiZ3zn/jmHd7cxatBgGgS/lPYxAxAj:AL5wmdeIze6zn/gFVg8FY6xA
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

vkeylogger discovery keylogger persistence stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

6b0936605c05ecd3e9658d3acfb9195893924778f3a41b2f74187de30a9af352.exe

Resource

win7-20241023-en

windows7-x64

9 signatures

150 seconds

vkeylogger discovery keylogger persistence stealer

Behavioral task

behavioral2

Sample

6b0936605c05ecd3e9658d3acfb9195893924778f3a41b2f74187de30a9af352.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

10 signatures

150 seconds

vkeylogger discovery keylogger persistence stealer

Malware Config

Targets

- Target
  6b0936605c05ecd3e9658d3acfb9195893924778f3a41b2f74187de30a9af352.exe
- Size 217KB
- SHA256 6b0936605c05ecd3e9658d3acfb9195893924778f3a41b2f74187de30a9af352
- MD5 57932aab8116c9d1201cd56365d9b2c3
- SHA1 3f249a42d82a1bdd5c15cb3c3b5c4cd968ec776c
- SHA512 e0bdff8fe0b557a89da2b2aca5ca844d2d6855537b950ce5a3bf46a7548fc4030f9239892a87086325cf1f9a37f4e14c939f144b6302fd3426da543515edefd9
- SSDEEP 3072:6eOjLpXVvSmdws9/WIdGTYoHoQiZ3zn/jmHd7cxatBgGgS/lPYxAxAj:AL5wmdeIze6zn/gFVg8FY6xA
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

vkeylogger discovery keylogger persistence stealer
- VKeylogger
  A keylogger first seen in Nov 2020.
  stealer keylogger vkeylogger
- VKeylogger payload
- Vkeylogger family
  vkeylogger
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vkeyloggerdiscoverykeyloggerpersistencestealer

behavioral2

vkeyloggerdiscoverykeyloggerpersistencestealer

© 2018-2026

Terms | Privacy