Extracted

• • Target

    1d94b90fab85ecfd4df1085b2f3c042014cde0e20ee4a938f2fc1e5766a5b729.exe

  • Size

    1011KB

  • MD5

    55647b9771645838c5702670d596a735

  • SHA1

    75682dcfd68b12afbdc8893db3abc1aa4d752eec

  • SHA256

    1d94b90fab85ecfd4df1085b2f3c042014cde0e20ee4a938f2fc1e5766a5b729

  • SHA512

    92573aee6dc97ef41a4162c97d90725e1dbd8788da8bdd5d01e10777beba97c3507f993240f6acd4200b76f404a705f5955d018ce5a74db7f7a3d253c9b0b6ed

  • SSDEEP

    24576:2u6J33O0c+JY5UZ+XC0kGso6FaBptvIX8WY:Yu0c++OCvkGs9FaBUvY

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2