General

  • Target

    0684d62dd44b077b6e537af5146b3481

  • Size

    410KB

  • Sample

    211229-k98bgadcdp

  • MD5

    0684d62dd44b077b6e537af5146b3481

  • SHA1

    ceabfa1f86844feacb09fcf2f99df4fb181834a3

  • SHA256

    b761256b5f20918c970f0d64b939e86d8304141b04e9024a809996da04d46c5e

  • SHA512

    8199af5ad9eef914e39b10f94295b940db542b1f02260370d3e13cccd067a9fc70d859fb89abaedbc226165a7794226de683d3ca664542740ae2a6431cd8e6f8

Malware Config

Targets

    • Target

      image.exe

    • Size

      516KB

    • MD5

      e60ded83982043932447eba0a568273c

    • SHA1

      835cfdbebbbcd44985572d5690d3dbcd8f041bbc

    • SHA256

      6dd4d7a668ac56bb6e71090d32a522e77c885e540758ed08ac03d702b02f26dd

    • SHA512

      b4055f3994ea402eb81a8b7d5824e6d778c4335f99fcef8625fa8166eb9ea55bc2398e137695a4b21efed5711e7acd5a7f2e36fe1179b221abb71807b8bb729c

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks