Extracted

Extracted

Extracted

• • Target
    Remittance Advice_pdf.exe
  • Size 11KB
  • SHA256 598e626b90a132ca0a97859b334fa459c523d426da5767bf59d723c46a9de44c
  • MD5 3d22ddd8efaa1d46e6fe8c094a678c39
  • SHA1 75903e3a282337ddac53e3f51aca605d410c3b97
  • SHA512 25819c522ea53c42768dbffb5a5f0ef25c2e84445499669b4afc300575563b0dfca0e2131b7f4cd6baf2dfd235a61d252b3ed18a4f187b7e18da98ad3056bb3e
  • SSDEEP 192:ytxDJkUURNR81y0793tcToL4+qzPOjbH4JG/Bp5RpLJ:XUw81793DM+qCv4JG/BhpL
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  purecryptervipkeyloggercollectiondiscoverydownloaderkeyloggerloaderstealer

  • PureCrypter

    PureCrypter is a .NET malware loader first seen in early 2021.

    loaderdownloaderpurecrypter

  • Purecrypter family

    purecrypter

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Drops startup file

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2