Extracted

• • Target

    SHIPPING ADVICE#2025.exe

  • Size

    790KB

  • MD5

    114e2c7c234714bba8ce80b667ac599a

  • SHA1

    434c8aa0d8aa18031a177bd93563b9877aa7eea2

  • SHA256

    8d4e282e2b9e5122ffb797a2d661a24e4ed8db6d42e64f7d24a545ee3e3678c0

  • SHA512

    058f774ed568f850a5f098b5f167c52e0c88ddf080cb91224b36d5a534fac0695edd6d1332ecfbc7bf13f5779781f13e27545ecfb0812cfcc9c256ac541f1258

  • SSDEEP

    12288:xl09fTe8uWb4knO+zAYD9j9LCnrjrAXWwDOs5pW+3zOc/2Zw01/GVnwUIhW5D:T09fswO+zbj9mn/jsC+NAX/enwUn

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2