General

  • Target

    Payment Confirmation.exe

  • Size

    376KB

  • Sample

    210802-2bdyzng4xx

  • MD5

    d27507faa20cdd3e772d43965d344408

  • SHA1

    21e73dca70ca864eec82221b8a6f0447ffbf8d07

  • SHA256

    ae7fbecf508de083bedb5e52af2f42d74c007966ab6faac00072597a9afd211f

  • SHA512

    efcb4b14e1ce2b329531f1f35924205e3eb062defb11fe50b955b0885cc870e6f4ddc37cd59728d649d24338bba516c707f86e7589f86659c7de4d1beb3c93be

Malware Config

Targets

    • Target

      Payment Confirmation.exe

    • Size

      376KB

    • MD5

      d27507faa20cdd3e772d43965d344408

    • SHA1

      21e73dca70ca864eec82221b8a6f0447ffbf8d07

    • SHA256

      ae7fbecf508de083bedb5e52af2f42d74c007966ab6faac00072597a9afd211f

    • SHA512

      efcb4b14e1ce2b329531f1f35924205e3eb062defb11fe50b955b0885cc870e6f4ddc37cd59728d649d24338bba516c707f86e7589f86659c7de4d1beb3c93be

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks