Extracted

• • Target

    LAT00125.exe

  • Size

    863KB

  • MD5

    37767a9344273d94fb212dc6712f6b0c

  • SHA1

    36391e9443a63cea9ed8cfe4cfeb6d138770bb63

  • SHA256

    b6a0e4852c647cd96d0a4b5ad63f3b9c2daa11a8d842c88f166a1a10a853043c

  • SHA512

    bcd7f63d1c32926f3cd975a973fed34f90acecd340515befbeeb9b95f8e1b7cf02d6575412724e3c6e52cf00f909e3963a76e98893cd0bda9505c3ea28459315

  • SSDEEP

    12288:Psjtshl095iCemgRYeJIDdrd+TZLLlNzqUYfFOns:0mhzCuJIprd25L6Uoi

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2