Overview

overview

10

Static

static

10

8ea0ce7a60...65.exe

windows7_x64

10

8ea0ce7a60...65.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ea0ce7a60ddf35b65a734e87ff8e1b35c4525105fbf37ba36c1096a8e1c8765

  • Size

    795KB

  • Sample

    220614-1yz4qafagr

  • MD5

    75ee2cab545b73dc3ffb4a51c188f413

  • SHA1

    a13d169deb59c403ece2e7a53e6413064595ac86

  • SHA256

    8ea0ce7a60ddf35b65a734e87ff8e1b35c4525105fbf37ba36c1096a8e1c8765

  • SHA512

    4e5d9d60df5e4a7bc4982484e99cd71bdd48c80cf8f40f8f9f7c98d15a646712fe31397f8bb1b43e247fbe785817b433ef39db4f2edcd8996c713908f62429a4

Score
10/10
kutakikeyloggerstealer

Malware Config

Targets

    • Target

      8ea0ce7a60ddf35b65a734e87ff8e1b35c4525105fbf37ba36c1096a8e1c8765

    • Size

      795KB

    • MD5

      75ee2cab545b73dc3ffb4a51c188f413

    • SHA1

      a13d169deb59c403ece2e7a53e6413064595ac86

    • SHA256

      8ea0ce7a60ddf35b65a734e87ff8e1b35c4525105fbf37ba36c1096a8e1c8765

    • SHA512

      4e5d9d60df5e4a7bc4982484e99cd71bdd48c80cf8f40f8f9f7c98d15a646712fe31397f8bb1b43e247fbe785817b433ef39db4f2edcd8996c713908f62429a4

    Score
    10/10
    kutakikeyloggerstealer

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

      stealerkeyloggerkutaki

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks