Extracted

• • Target
    Teklif İsteği 27-10-2026_PDF.exe
  • Size 1.1MB
  • SHA256 256b9eb0b0ef69eeee00712c0e9fab59601934633f2bb6d0a0b10ac04bd5b2ab
  • MD5 a9c5c2a2ab6289eae0a3320287444bda
  • SHA1 864473e21fa63bcae0baffbbaeace361661d860b
  • SHA512 8f9a5c28c2241508d27506287e92fa38f92a8b5d319ec5357bdc9aa1b03b21cdbee609f115974a98bf8b7ec69428e246a87016b9d0544a724303a349d24494fb
  • SSDEEP 12288:xyc4CnolCsoYdAA9mJadBeFZYBpqEC1xv0oi7Qd2YI1Qsc6F3lrK/CDEZlfhk+4/:xyhfMs1hsAdBen2pqpZsjF3leHTx5E
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  collectiondiscoveryvipkeyloggerkeyloggerspywarestealer

  • VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Vipkeylogger family

    vipkeylogger

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2