Extracted

• • Target

    2552ad0ace3e621451f2878607d55eaa1a947b6506b4d573118f02057a85ed76.exe

  • Size

    974KB

  • MD5

    783e80f04423694cd8eee98ab46cbafe

  • SHA1

    ddf36a4f83180aee96cd2329155510836d7c8b56

  • SHA256

    2552ad0ace3e621451f2878607d55eaa1a947b6506b4d573118f02057a85ed76

  • SHA512

    b99a72de9b338b05804edd6f3f88716e28cf46be522add089f93260afa0d89d62e6a118ca0e7c89b1bffc3d23094da9154f07e551cd8713f84f60b18d319f764

  • SSDEEP

    12288:f018r7wD3HYrWyIXBoDhoBCAxSr0fFC0WYxc6s8k4dnrR5O/4FLmMniKnwGsOlMC:futyAuGXfIMxLA4xeAmMniPTLhjI

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2