Overview

overview

10

Static

static

10

IncomeTax_...pt.exe

windows7_x64

10

IncomeTax_...pt.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    IncomeTax_Payment_Receipt.exe

  • Size

    636KB

  • Sample

    220703-kyb4wsfag7

  • MD5

    bc6618a7be87946f55d90ac92b47f0bc

  • SHA1

    10da65cd3ba38618f83473ab6c09abaec80e8341

  • SHA256

    9b301c6642a4184267f2c62cfd2b32b0766a1e82caf699136a575ba07d3c7307

  • SHA512

    d8939bb5ade4e6abda0b67f591390521ac91078727b4231e5191a473454dd5e84e9a707e8af0376d24924e6c04d85889f74c2797489cd0e1b2e6c459cacfab0f

Score
10/10
kutakikeyloggerstealer

Malware Config

Targets

    • Target

      IncomeTax_Payment_Receipt.exe

    • Size

      636KB

    • MD5

      bc6618a7be87946f55d90ac92b47f0bc

    • SHA1

      10da65cd3ba38618f83473ab6c09abaec80e8341

    • SHA256

      9b301c6642a4184267f2c62cfd2b32b0766a1e82caf699136a575ba07d3c7307

    • SHA512

      d8939bb5ade4e6abda0b67f591390521ac91078727b4231e5191a473454dd5e84e9a707e8af0376d24924e6c04d85889f74c2797489cd0e1b2e6c459cacfab0f

    Score
    10/10
    kutakikeyloggerstealer

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

      stealerkeyloggerkutaki

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks