Overview

overview

10

Static

static

10

TDS Challan.exe

windows7-x64

10

TDS Challan.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59f20bfe00956a55cfdf0403942b51d5ee17207eac28e9ea6ea6c6a5840b1ec0

  • Size

    408KB

  • Sample

    220724-cstgzsbef6

  • MD5

    9b853be5601b1bec711b000d443d7057

  • SHA1

    99f68601d20a8c9f8d5682e2a5c77af7a8717bea

  • SHA256

    59f20bfe00956a55cfdf0403942b51d5ee17207eac28e9ea6ea6c6a5840b1ec0

  • SHA512

    dc88f293955092b00e6b0d86202eae53a83b607c2b9da9cdcf191abb3c488362c8e81316d06dc4319b25fe565198744d3528f0dcd759edad9ec70bb3566ccbcd

Score
10/10
kutakikeyloggerstealer

Malware Config

Targets

    • Target

      TDS Challan.exe

    • Size

      707KB

    • MD5

      2600b7e78f3a1d996294bcc27b309594

    • SHA1

      a90f63310dca46b419cfcbe95d90e1517932d6d3

    • SHA256

      8b12a088323095e7307e40be4b3194cebd6756d9414d360e06e2015804ad6b58

    • SHA512

      db6926d1cf359712dd7c77b48444f00d0f8ea776cdec752d604a68a3037eadbd38723f50ee655821eda51d21a528c00313e505575816c2ad659856fad886da7b

    Score
    10/10
    kutakikeyloggerstealer

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

      stealerkeyloggerkutaki

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks