Extracted

Extracted

• • Target
    KAPLAMA-TEKLIF+TALEP+FORMU_+REV+00239936_D01+07.08.2026.rar
  • Size 22KB
  • SHA256 8d7ead144a90fe6ba15bf6d8961fd9d0ae55124e3021496fe162e58592fa59b8
  • MD5 896a64681d3da7ac552c9d8e931abd40
  • SHA1 a35578b6a093e8d3805985dca505f353b0309b43
  • SHA512 ce5c0497c888c6cc2055de5327aa0ce3d432cc33c9f696924e09891ab19cbe87cffc8158b673138f7ac7410110007efa82313872cba59340d5d8ed19f332dbc5
  • SSDEEP 384:nVFz+BtdmIfCP0+es738PuKwbCyMwQVeIPv+tNFlhxy2G/J3Ba+q0gKmhIXvEvk1:zz+BfT+z7yuVKV3PvWpxy2G/Bch0hmwz
  • TLSH
    T158A2E181185FCE80466B99E83CD98BED886FC1FB98C90CFE1816922DDF453A907B4917
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral1behavioral2
• • Target
    KAPLAMA-TEKLIF TALEP FORMU_ REV 00239936_D01 07.08.2026.js
  • Size 89KB
  • SHA256 f6443d840cb5aca87c0f9af5f4228d1968c818c6174716a088cc534913eefa10
  • MD5 9ef1bf63623347d9ec9881fdd5901d17
  • SHA1 2a7502530a85f531c2eac261d4aa4dcb1231ad5d
  • SHA512 0ac2b82d179ae2c20365bd16a2ad796d3ac298dbb6326d9c2225ac36b33b874bff7e287cdb7b8f0c570c2da19160e81ab902495e8ab8efe3a76599e22dff6b9e
  • SSDEEP 768:j5QngVchBjfDW/PXXn/ZPBTmoxfRUOBuUMXp6cQznTT9ARzRY168+fDL7lJNoJV6:OHmSeT68/AaX6Gnd3R7Rwi6ljIO3
  • TLSH
    T13D9310910A877480537767BFA36AA8E4EBB20B2702901927B83C7850DFF1D1ADED4D75
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectiondiscoveryexecutionvipkeyloggerkeyloggerstealer

  • Family: VIPKeylogger

    VIPKeylogger is a keylogger and infostealer written in C# and it resembles SnakeKeylogger that was found in 2020.

    stealerkeyloggervipkeylogger

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery

  • ConfuserEx .NET packer

    Detects ConfuserEx .NET packer.

  • Suspicious use of SetThreadContext

  behavioral3behavioral4