General

  • Target

    7c1b70174d26b365555d457f7f564bd3bde4e66d84fd9b0d49b12fffa62daac6

  • Size

    1.3MB

  • Sample

    220508-2ecdzshch2

  • MD5

    e184e10181e18e7a761530dccb296bd7

  • SHA1

    852260f0776d884678ba949957f31a8da3edb71e

  • SHA256

    7c1b70174d26b365555d457f7f564bd3bde4e66d84fd9b0d49b12fffa62daac6

  • SHA512

    7bb7e0c4857eda2782a4e8c2342a2d8dfd6b70df1900ae5443600ae379f7d20efb5100f9992a009d6c12be56054f4afd1d611d0d29574a163b396894612047c1

Malware Config

Targets

    • Target

      7c1b70174d26b365555d457f7f564bd3bde4e66d84fd9b0d49b12fffa62daac6

    • Size

      1.3MB

    • MD5

      e184e10181e18e7a761530dccb296bd7

    • SHA1

      852260f0776d884678ba949957f31a8da3edb71e

    • SHA256

      7c1b70174d26b365555d457f7f564bd3bde4e66d84fd9b0d49b12fffa62daac6

    • SHA512

      7bb7e0c4857eda2782a4e8c2342a2d8dfd6b70df1900ae5443600ae379f7d20efb5100f9992a009d6c12be56054f4afd1d611d0d29574a163b396894612047c1

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks