General

  • Target

    73733257bc449d4fed5bd3ffb494a0ce11c6c8c68b58b464761d194bc24ff29b

  • Size

    401KB

  • Sample

    220221-1yd69abac5

  • MD5

    fb66eebf8d4d2025c78c6bc6a5cec488

  • SHA1

    2f93f18818c1601847eb613166cc53ec11fa359e

  • SHA256

    73733257bc449d4fed5bd3ffb494a0ce11c6c8c68b58b464761d194bc24ff29b

  • SHA512

    97d586074e0ee02198d6626cc81e985b2953f28a4464a05fbe4ebb30583c3c011ca017c112d52e7ee5f4a64e2e8b1eb8a286bf5d5120f374db82fae5c46e86a3

Malware Config

Targets

    • Target

      tracking details.exe

    • Size

      752KB

    • MD5

      3c35fca6cb231d20cc04e6d8b2601010

    • SHA1

      aecde409a20bdaa63be0570d5625938e7df50197

    • SHA256

      e6cd47abf6c7c73449bd05329a0e30a48012c947d8762dd2429333af8d7bc198

    • SHA512

      0b7e2604adf2d89ef471336f8dd322c9f8b222e404aa68fbf67a13ced6ec0eb0a8c9968cb92401b44d2d4d1a1e53e51e7d8840f74ee4baec3f1d4b05d76d1d77

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks