Extracted

• • Target

    Tax Payment Challan.exe

  • Size

    768KB

  • MD5

    d25f259e5943e02244d5a6fb3cc9b778

  • SHA1

    ae4c93a5264acdf26a11cd9165f7382afceedb50

  • SHA256

    4b0f2eb3c83c7a8f9bf0f945feeadad30cb7e5432f6c66fe7d6b921925ce142a

  • SHA512

    8363351c576a8be88a02408ebcfc60a6c5abc0db402cd12b349c80b787bb3fd9bc2ab6206c3a7293ff187b61d0da2cdf6100020836c8a590a2181689c72fd019

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Loads dropped DLL

  behavioral1behavioral2