Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

SHIPPING O...1..exe

windows7-x64

7

SHIPPING O...1..exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SHIPPING ORDER 2025-1..tar.001.tar

  • Size

    1.3MB

  • Sample

    250325-xpy9aavjv4

  • MD5

    bdad1182eda35b5def4977884249752a

  • SHA1

    0fd52be4886cc3967b9f4e5529029d21e50a3d37

  • SHA256

    9f313e90e48f109eabf4a696e59abc55b2a20a0144fa59ed56c357bb7b7c0684

  • SHA512

    74dfef079a208d8dcb6f8100773f7f76efd96a397bf297e4e466322563e927769df19de537ae4dce9411c31386b1e8e9f9c5f59f0e234300a208d4d6ccb081a4

  • SSDEEP

    24576:UigUXrbkXJvAU6GK+iqL0TiyIJeppSGx8YR/REoF:HW5vAPFc+iXHGxrrEoF

Score
10/10
vipkeyloggercollectiondiscoverykeyloggerstealer

Malware Config

Extracted

Family

vipkeylogger

Credentials

Targets

    • Target

      SHIPPING ORDER 2025-1..exe

    • Size

      1.3MB

    • MD5

      acef70ec8ea3cdae725c421e22d4def1

    • SHA1

      014276631452de17d302a315d6353f58af42a5eb

    • SHA256

      841f58752bc745d62a108bff362df80ca7694a612843de53f8fe4b228089e9da

    • SHA512

      23c7fe41a29476f14bf786e5e6c35e631570bbf7d6a50509d6bb1cd1d42f4f5dce7abb1f584ac18dd7d800ac91957a0344de13af1b5ab81220c2086645b3b271

    • SSDEEP

      24576:iigUXrbkXJvAU6GK+iqL0TiyIJeppSGx8YR/REoF+:5W5vAPFc+iXHGxrrEoF+

    Score
    10/10
    discoveryvipkeyloggercollectionkeyloggerstealer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • VIPKeylogger

      VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

      stealerkeyloggervipkeylogger

    • Vipkeylogger family

      vipkeylogger

    • Drops startup file

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks