Extracted

• • Target
    b810e44656bb962ee96142c97f3c50a20b5f0f9fa9ccb5b5e1d15ea7c67e2866.exe
  • Size 865KB
  • SHA256 b810e44656bb962ee96142c97f3c50a20b5f0f9fa9ccb5b5e1d15ea7c67e2866
  • MD5 23861fbddf47225a411eb7767bcb2564
  • SHA1 abd0fb7a6a16d65a739e37738ea7e15ad2f12b04
  • SHA512 26bf1a960c74fad42ecc3607bdd73629b7b6e0162d27cc2bd677fdcca861f61e8e6e6dee8dda1b4491f596f509143575d417cd06dd130600bddb7858b8610cce
  • SSDEEP 12288:Sp0doLLpo4wgZkVNn8iZ0mpJ8/U2c+hJxA9u85kfl/YbeCSM6ngFWnDTRvM1S8uK:IYoLLiuZkz8iOmLqroQflgaDnnpkQL
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1