General

  • Target

    1.exe

  • Size

    672KB

  • Sample

    210618-248mbc9qsj

  • MD5

    6fe4c0a26bc8bf888bd850cea123b748

  • SHA1

    fc07f3e3eb2356ef19620f7ef858e2da63a5e898

  • SHA256

    2008d644d84c32686a9898fbd881e01fc9372a111c554d5184e9dd11805a2697

  • SHA512

    6b1a86a73cd429059d6691b15a0af82d92675254b9966841296059d086a9213b36c15b9cb52528d7c19fc79f43a8b17a28747700ffe55353ac56042cf054e344

Malware Config

Targets

    • Target

      1.exe

    • Size

      672KB

    • MD5

      6fe4c0a26bc8bf888bd850cea123b748

    • SHA1

      fc07f3e3eb2356ef19620f7ef858e2da63a5e898

    • SHA256

      2008d644d84c32686a9898fbd881e01fc9372a111c554d5184e9dd11805a2697

    • SHA512

      6b1a86a73cd429059d6691b15a0af82d92675254b9966841296059d086a9213b36c15b9cb52528d7c19fc79f43a8b17a28747700ffe55353ac56042cf054e344

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks