Overview

overview

10

Static

static

10

E-bill.exe

windows7_x64

10

E-bill.exe

windows10-2004_x64

10

Resubmissions

11/07/2022, 13:08

220711-qdebeahcgm10

11/07/2022, 03:42

220711-d9b5psgga910

Sharing

Copy URL Twitter E-mail

General

  • Target
    E-bill.exe
  • Size 968KB
  • Sample220711-d9b5psgga9
  • SHA256 e296a3f9af1ee967a9a919495e2a12917dd4077d794a54e25b9e16c02854a74e
  • MD5 SHA1 SHA512
Score
10/10
kutakikeyloggerstealer

Malware Config

Extracted

Family

  • kutaki

C2

  • http://ojorobia.club/laptop/laptop.php

  • http://terebinnahicc.club/sec/kool.txt

Targets

    • Target
      E-bill.exe
    • Size 968KB
    • SHA256 e296a3f9af1ee967a9a919495e2a12917dd4077d794a54e25b9e16c02854a74e
    • MD5 SHA1 SHA512
    Score
    10/10
    kutakikeyloggerstealer

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

      stealerkeyloggerkutaki

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks