Extracted

• • Target

    Tax Payment Challan.exe

  • Size

    716KB

  • MD5

    048d34edb1310036f884ccca5905b216

  • SHA1

    47bc33931d26ee7d7455398a74abff5beca1d39c

  • SHA256

    0aa466d43ac980075738dafa15dde3e6ed03925fe732eb2d90f31ad297c49b23

  • SHA512

    d853f906f18483e7d5e835af8b6239bb55722a9be0224c3897ec5cf09f7ef33836edbd192427aa53e4dc34140fcb921e95099d2e23d29cfba76bdab90473f186

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Loads dropped DLL

  behavioral1behavioral2