Overview

overview

10

Static

static

10

Tax Paymen...an.exe

windows7_x64

10

Tax Paymen...an.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cabd4ef487d6c2493d2cf6fa45f3027473419125c7b54676459bc22da7c6a00

  • Size

    496KB

  • Sample

    220614-1y2bsafahl

  • MD5

    e0b2ac4b019ae2f69b304a8e00fb63de

  • SHA1

    fbf68ae2e8435b7764bbbcea5b9f330219f2a202

  • SHA256

    2cabd4ef487d6c2493d2cf6fa45f3027473419125c7b54676459bc22da7c6a00

  • SHA512

    4f29740126c7fb2b02566dcc5f04739ecc731aa54cc792a26b2f92519ead5268ba337018ef2de157dc01cce8b8489d0b9536ce5d8184a2635005a1c4bb2fee5f

Score
10/10
kutakikeyloggerstealer

Malware Config

Targets

    • Target

      Tax Payment Challan.exe

    • Size

      795KB

    • MD5

      75ee2cab545b73dc3ffb4a51c188f413

    • SHA1

      a13d169deb59c403ece2e7a53e6413064595ac86

    • SHA256

      8ea0ce7a60ddf35b65a734e87ff8e1b35c4525105fbf37ba36c1096a8e1c8765

    • SHA512

      4e5d9d60df5e4a7bc4982484e99cd71bdd48c80cf8f40f8f9f7c98d15a646712fe31397f8bb1b43e247fbe785817b433ef39db4f2edcd8996c713908f62429a4

    Score
    10/10
    kutakikeyloggerstealer

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

      stealerkeyloggerkutaki

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks