General

  • Target
    689a19bf9eed2b5458ee1ac3eb1b127500f658eee3acde9955efae97fb6ec32f
  • Size 755KB
  • Sample220701-gbmekaecbp
  • SHA256 689a19bf9eed2b5458ee1ac3eb1b127500f658eee3acde9955efae97fb6ec32f
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      689a19bf9eed2b5458ee1ac3eb1b127500f658eee3acde9955efae97fb6ec32f
    • Size 755KB
    • SHA256 689a19bf9eed2b5458ee1ac3eb1b127500f658eee3acde9955efae97fb6ec32f
    • MD5 SHA1 SHA512
    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v6

Tasks