General

  • Target

    8b12a088323095e7307e40be4b3194cebd6756d9414d360e06e2015804ad6b58

  • Size

    707KB

  • Sample

    220625-f48mtsfgek

  • MD5

    2600b7e78f3a1d996294bcc27b309594

  • SHA1

    a90f63310dca46b419cfcbe95d90e1517932d6d3

  • SHA256

    8b12a088323095e7307e40be4b3194cebd6756d9414d360e06e2015804ad6b58

  • SHA512

    db6926d1cf359712dd7c77b48444f00d0f8ea776cdec752d604a68a3037eadbd38723f50ee655821eda51d21a528c00313e505575816c2ad659856fad886da7b

Malware Config

Targets

    • Target

      8b12a088323095e7307e40be4b3194cebd6756d9414d360e06e2015804ad6b58

    • Size

      707KB

    • MD5

      2600b7e78f3a1d996294bcc27b309594

    • SHA1

      a90f63310dca46b419cfcbe95d90e1517932d6d3

    • SHA256

      8b12a088323095e7307e40be4b3194cebd6756d9414d360e06e2015804ad6b58

    • SHA512

      db6926d1cf359712dd7c77b48444f00d0f8ea776cdec752d604a68a3037eadbd38723f50ee655821eda51d21a528c00313e505575816c2ad659856fad886da7b

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v6

Tasks