Extracted

• • Target

    Tax Payment Invoice.exe

  • Size

    740KB

  • MD5

    bba7a2ee3cc8f1b19f25cf46a2c35b24

  • SHA1

    f62736f38dc27ed47bd89c75eff750ef1d2fb8e4

  • SHA256

    fbc0263ae8cef48b184cfee870c2f5f4ee3c5006ffb0090cc3f024486628a4eb

  • SHA512

    0bbcc177b77f01d3e65faff0c0913562270b580cc86a3b944fb53750484e0231160f4947492ac34257df3cfbdab4ea080cc7826aa7ff5dac4d5fecc8bbaa512d

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Loads dropped DLL

  behavioral1behavioral2