General

  • Target

    New Order.scr

  • Size

    632KB

  • Sample

    200805-arnebas9fa

  • MD5

    5cd9d49f5cad5e0910e90ce8183b4366

  • SHA1

    c457eb69ef65e0c02c330f5f2fb0e6e47b8d6a7b

  • SHA256

    1de49d29d2f5c485ef935ce6f50176272745d32d258f5996f029f4e78a614af7

  • SHA512

    87a5aff468b8243e4d542dc6fd639bcf4c3e5b54b9d17c27b4605c9fdafb045a078653d049c96ef3bbfcfdf7feef7f58033da85be98d76c621c3fe5ab13cf65d

Malware Config

Targets

    • Target

      New Order.scr

    • Size

      632KB

    • MD5

      5cd9d49f5cad5e0910e90ce8183b4366

    • SHA1

      c457eb69ef65e0c02c330f5f2fb0e6e47b8d6a7b

    • SHA256

      1de49d29d2f5c485ef935ce6f50176272745d32d258f5996f029f4e78a614af7

    • SHA512

      87a5aff468b8243e4d542dc6fd639bcf4c3e5b54b9d17c27b4605c9fdafb045a078653d049c96ef3bbfcfdf7feef7f58033da85be98d76c621c3fe5ab13cf65d

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks