Extracted

• • Target

    0138369002_pdf.exe

  • Size

    1.0MB

  • MD5

    2ebdfaabdb14007d5fd0256256819bec

  • SHA1

    dff9d44238fa5fa972be4f103ab4a49aab1018a8

  • SHA256

    5940ea89be33110c787f4be5d2c445c8bd022852a2fcaa6913fffb5805bafd90

  • SHA512

    0950725714ec9704f41c50fb7fdc91705ef2230cb887d38edcb944049a217b91c4276d77bfe193b5cd1c7bc46e3f81f5600bab53502f1329af19e9d1f90b459d

  • SSDEEP

    24576:Wu6J33O0c+JY5UZ+XC0kGso6FaO3xnfG5lz1WY:4u0c++OCvkGs9Fa2xfG5OY

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2