Overview

overview

10

Static

static

10

Payment.exe

windows7_x64

10

Payment.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Payment.exe

  • Size

    752KB

  • Sample

    210115-dr19vkgxbs

  • MD5

    55cb3b1b1f6fcb56f0e8d26cb8a4b8f2

  • SHA1

    ce7013abac9be7c9ad1b700e8a3c735b97392819

  • SHA256

    8179d2c371934e7f748fdf033d96a3b527158348e87ec21f1576136ede5d2d17

  • SHA512

    a7c8e2f47bada4a62dca21ce900ad71dcdcf61011873e494603970102e9fbcb0fc8365c437c1c5f3f1f946cd78a6fc2a243df641b75df72b85910f06b98890f2

Score
10/10
kutakikeyloggerstealer

Malware Config

Targets

    • Target

      Payment.exe

    • Size

      752KB

    • MD5

      55cb3b1b1f6fcb56f0e8d26cb8a4b8f2

    • SHA1

      ce7013abac9be7c9ad1b700e8a3c735b97392819

    • SHA256

      8179d2c371934e7f748fdf033d96a3b527158348e87ec21f1576136ede5d2d17

    • SHA512

      a7c8e2f47bada4a62dca21ce900ad71dcdcf61011873e494603970102e9fbcb0fc8365c437c1c5f3f1f946cd78a6fc2a243df641b75df72b85910f06b98890f2

    Score
    10/10
    kutakikeyloggerstealer

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

      stealerkeyloggerkutaki

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks