Extracted

• • Target

    K25004 Chin Bee Road Piling Layout.exe

  • Size

    1.1MB

  • MD5

    c1523e38552e62abe928da077238703b

  • SHA1

    09f2fa809b337d4f189f192f44d5ac82d607fcab

  • SHA256

    4b3fb4c8594eec8feffeb0955e3103e6211086450e5fa202b4188de5c9179960

  • SHA512

    bb77daf580f45b8b46ad004fa4e495b31eee770e1615af0d9d0c86c1b641aece87ad2db95ca776536e03b1879341a9d3c2d8d179644f63ee463523f9cc6d6548

  • SSDEEP

    24576:vu6J33O0c+JY5UZ+XC0kGso6FaLJER/9UOJsWY:Zu0c++OCvkGs9FaLJw9U2Y

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerstealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2