vipkeylogger

Resubmissions

28/03/2025, 02:42

250328-c7a9yssrz3 10

28/03/2025, 02:36

250328-c32w4s1tey 10

Sharing

Copy URL

Twitter E-mail

General

Target

061e83ad8b13e285fedf59eee385091cbdd9d269f33809859cf95e79e3209765
Size

521KB
Sample

250328-c7a9yssrz3
MD5

1d21a91da175265d6d6fff5878909d71
SHA1

b1a0ff75966da1a543f00d0b8209d77ff3904ebb
SHA256

061e83ad8b13e285fedf59eee385091cbdd9d269f33809859cf95e79e3209765
SHA512

ed06fd6c55b3217fea8f811e710ef1c42d21c9d6bd82ec306067cf3a4d693db041ec42920c4e97da562d23e1d9626467f395336ca88d20a43f864cff498ef6b9
SSDEEP

12288:lbpPyZaqz3kMqAK4D5prONc4aSiE7+YoK7QZF:lbpcaqjkMVKQZT4aaRo/P

Score

10^/10

Malware Config

Extracted

Family

vipkeylogger

https://api.telegram.org/bot8089350393:AAGtBAwUH6SGnhWUaMF4LZ_wf4asnjV0ZLY/sendMessage?chat_id=7839951264

Targets

- Target
  
  061e83ad8b13e285fedf59eee385091cbdd9d269f33809859cf95e79e3209765
- Size
  
  521KB
- MD5
  
  1d21a91da175265d6d6fff5878909d71
- SHA1
  
  b1a0ff75966da1a543f00d0b8209d77ff3904ebb
- SHA256
  
  061e83ad8b13e285fedf59eee385091cbdd9d269f33809859cf95e79e3209765
- SHA512
  
  ed06fd6c55b3217fea8f811e710ef1c42d21c9d6bd82ec306067cf3a4d693db041ec42920c4e97da562d23e1d9626467f395336ca88d20a43f864cff498ef6b9
- SSDEEP
  
  12288:lbpPyZaqz3kMqAK4D5prONc4aSiE7+YoK7QZF:lbpcaqjkMVKQZT4aaRo/P
Score

1^/10
behavioral1 behavioral10 behavioral11 behavioral12 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9
- Target
  
  Payroll List.exe
- Size
  
  1.0MB
- MD5
  
  13c442d8b8f4b6039b92e9beabaed96c
- SHA1
  
  00e5f09a57064338f1db88298f31c50d853aca9e
- SHA256
  
  aa21fca827d1d73cfc4f1153945a1534a66240e396ba3f9b361b6bd80aa31023
- SHA512
  
  f44f42b5847530e647cf556fa2f014bd163d2657185b3ea6819fa95c2dae4a2ac7abaf4ca6f43ef259c6f1de15e9c4c87b0a7ba015aa6c07eb17e7b00544b97c
- SSDEEP
  
  24576:Du6J33O0c+JY5UZ+XC0kGso6Faj1bcFSonuDiWY:Nu0c++OCvkGs9FapbbocY
Score

10^/10

discovery vipkeylogger collection keylogger stealer
- VIPKeylogger
  VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.
  stealer keylogger vipkeylogger
- Vipkeylogger family
  vipkeylogger
- Accesses Microsoft Outlook profiles
  collection
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of SetThreadContext
behavioral13 behavioral14 behavioral15 behavioral16 behavioral17 behavioral18 behavioral19 behavioral20 behavioral21 behavioral22 behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Email Collection

T1114

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Extracted

Targets

Vipkeylogger family

Accesses Microsoft Outlook profiles

Looks up external IP address via web service

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24