Overview

overview

10

Static

static

10

07f168a8d6...7d.exe

windows7_x64

10

07f168a8d6...7d.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07f168a8d6006d5d188c90ec4b5bd19c438fe69d522ef5779c59a2b9fb0b167d

  • Size

    840KB

  • Sample

    220530-3zxfbsbebn

  • MD5

    66bd57544cea67ce901427c1b81c78a0

  • SHA1

    2d880248452407b682ca5514d07aa0899e12297f

  • SHA256

    07f168a8d6006d5d188c90ec4b5bd19c438fe69d522ef5779c59a2b9fb0b167d

  • SHA512

    42abd27e80a58e1134f61a17c7f7692a1c8a5130b1d16d9e23f41e8205f694aad93c89da64dd0d467c2821d653b5cb83942ecf20a033beacdb03ccf430ac528e

Score
10/10
kutakikeyloggerstealer

Malware Config

Targets

    • Target

      07f168a8d6006d5d188c90ec4b5bd19c438fe69d522ef5779c59a2b9fb0b167d

    • Size

      840KB

    • MD5

      66bd57544cea67ce901427c1b81c78a0

    • SHA1

      2d880248452407b682ca5514d07aa0899e12297f

    • SHA256

      07f168a8d6006d5d188c90ec4b5bd19c438fe69d522ef5779c59a2b9fb0b167d

    • SHA512

      42abd27e80a58e1134f61a17c7f7692a1c8a5130b1d16d9e23f41e8205f694aad93c89da64dd0d467c2821d653b5cb83942ecf20a033beacdb03ccf430ac528e

    Score
    10/10
    kutakikeyloggerstealer

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

      stealerkeyloggerkutaki

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks