Extracted

• • Target

    embin.exe

  • Size

    269KB

  • MD5

    54ed31311c04c7840686d8df6ac651fe

  • SHA1

    dacd411b10530ac9d7ccdb13a41ae80393c10323

  • SHA256

    2e233b4f99a6585ffc9423a418d4e5ebdfc46f1b4a50219a089c3d2285196e52

  • SHA512

    10991e0908b122410764d674c5908ddd181e35020c8f512aad62497bb9a0067a08c2fa7b6f8a2862b458dddaf84847ea0b9ab73086752b7dd5218fc0be314488

  • SSDEEP

    3072:MzYf8UzImvBvPBR92j1MrvhiRpN9JtxupHmb7JMysHWTYTVgfiPbbY:Np02NmbSYub

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2