Extracted

• • Target

    Num_24-2583_proforma_Invoice_Document_pdf.exe

  • Size

    994KB

  • MD5

    0d2c8d3b909700b869d842880383d08f

  • SHA1

    9501835ca85d7479202b98d18b8dc7b765431ab5

  • SHA256

    12e0b7500435994f25d66b3a1cba2c92735c6dc51c2b9a9e3dbc78c11b3d2ff7

  • SHA512

    685c002e05b2c6136507d0d1e0dd7792be5c16423817a64a907c368225607710ad1869f3543c24809612460b640199d6764b7855fd82b4a85971dfd77e35ed96

  • SSDEEP

    24576:Vu6J33O0c+JY5UZ+XC0kGso6Fad+E28lrF5lPWY:3u0c++OCvkGs9Fad+EZrF54Y

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2