Overview

overview

10

Static

static

10

0d3cf290f1...76.exe

windows7_x64

10

0d3cf290f1...76.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d3cf290f14c09e02aa3cea0c711e01955131d829cf7369b1f2dba351ba49d76

  • Size

    499KB

  • Sample

    220529-z7lr1sedej

  • MD5

    ee9d608c58f615144948a76f0c271dda

  • SHA1

    f95fcd18d45361e61b6947c4002e10b714b12127

  • SHA256

    0d3cf290f14c09e02aa3cea0c711e01955131d829cf7369b1f2dba351ba49d76

  • SHA512

    32c45c057f1cdbf85085fb07cd490489acbf44d17dd6985141145807e441d8837c0be2650c664e1aaef39da968131435ebdf01446f064167ad42929f2d8dc503

Score
10/10
kutakikeyloggerstealer

Malware Config

Targets

    • Target

      0d3cf290f14c09e02aa3cea0c711e01955131d829cf7369b1f2dba351ba49d76

    • Size

      499KB

    • MD5

      ee9d608c58f615144948a76f0c271dda

    • SHA1

      f95fcd18d45361e61b6947c4002e10b714b12127

    • SHA256

      0d3cf290f14c09e02aa3cea0c711e01955131d829cf7369b1f2dba351ba49d76

    • SHA512

      32c45c057f1cdbf85085fb07cd490489acbf44d17dd6985141145807e441d8837c0be2650c664e1aaef39da968131435ebdf01446f064167ad42929f2d8dc503

    Score
    10/10
    kutakikeyloggerstealer

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

      stealerkeyloggerkutaki

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks