Skip to main content

VIP Keylogger

Malware Family

18 indicators of compromise attributed to VIP Keylogger across abuse.ch threat intelligence feeds.

Domains

2

IPs

0

URLs

4

Hashes

12

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (2)URLs (4)Hashes (12)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
mail.nemail.codomain
spacaex.comdomain
https://hosting237141.af91b.netcup.net/wp-includes/sitemaps/rxgoqeb/mrxwi1u/xtlmbae/crypted.ps1url
https://hosting237141.af91b.netcup.net/wp-includes/sitemaps/rxgoqeb/mrxwi1u/xtlmbae/acrypted.ps1url
https://myprojectverification.linkpc.net/documentpri/Crypted.ps1url
https://profileone.jo3.org/massfrnd/Crypted.ps1url
f5e01b07215c84d925f8a49a2bd433d7hash
ccdb7e8fe4ec5630bee8b7efe1ca7de0ad846aeb440b52acbb8222f2d647702fhash
ccea8efb6893fb0792dd7dc868191a1123f7959bhash
f7fb31cc8b2a0be022168204bcfd91a7hash
f68b0ab0aa45a9119c1a097c4d64dd3250733f771b34cec0699e3f9a7c88d79ehash
bbe3b65bfddcacf116b310acd312395ef2d6b54ehash
ddb1fae4a772b5eb9db713b5974e5ffcbc5f712a0be8b1081323e91227d64e79hash
6b97bf764e3c924ac217209a49a41b8297ccb79dhash
0ef492da421b72a19541d1ae856efdffhash
03e934c4dd23a0f630dec0f3c89ac864f94629f0a4c74c1e69ff71c49588a219hash
a29bb10d171b6d65f11c3b8e9e8dc50f6f2bc91bhash
4f398ea864ade8635dbabce66a963d91hash

Another file to check? Run a file hash reputation check.