Extracted

Extracted

• • Target
    SecuriteInfo.com.Win32.MalwareX-gen.13482.26883.exe
  • Size 934KB
  • SHA256 5d5edf2c80c6c8c6a6619d4ee719e7af084d544dc303e4ec601d9f46adfabb14
  • MD5 81cfd9d0f903581b34e984e9fa60bffe
  • SHA1 8bc6b6db34267801482b2699cbf74a3e2198d0d5
  • SHA512 47f91cbe343ae09c4276b771828953738b66888ed7ced69834b6750312caeb5850b088c14a23a516f0de9a27473d169142b4d872694bb5f70aa7584c85bd39df
  • SSDEEP 24576:lwRwwQ9J5PLpWrNgAlb0P10Xsa5WjVtB:amD7LpyNgAlbwVa5e
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  vipkeyloggercollectiondiscoverykeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2