General

  • Target

    tracking details.exe

  • Size

    752KB

  • Sample

    210117-jwcg55rwdj

  • MD5

    3c35fca6cb231d20cc04e6d8b2601010

  • SHA1

    aecde409a20bdaa63be0570d5625938e7df50197

  • SHA256

    e6cd47abf6c7c73449bd05329a0e30a48012c947d8762dd2429333af8d7bc198

  • SHA512

    0b7e2604adf2d89ef471336f8dd322c9f8b222e404aa68fbf67a13ced6ec0eb0a8c9968cb92401b44d2d4d1a1e53e51e7d8840f74ee4baec3f1d4b05d76d1d77

Malware Config

Targets

    • Target

      tracking details.exe

    • Size

      752KB

    • MD5

      3c35fca6cb231d20cc04e6d8b2601010

    • SHA1

      aecde409a20bdaa63be0570d5625938e7df50197

    • SHA256

      e6cd47abf6c7c73449bd05329a0e30a48012c947d8762dd2429333af8d7bc198

    • SHA512

      0b7e2604adf2d89ef471336f8dd322c9f8b222e404aa68fbf67a13ced6ec0eb0a8c9968cb92401b44d2d4d1a1e53e51e7d8840f74ee4baec3f1d4b05d76d1d77

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks