Extracted

• • Target

    State Bank of India Payment.exe

  • Size

    536KB

  • MD5

    b01906f5328bf8df68d9c0e5637ee050

  • SHA1

    9a83caa72c6c86d399acf1da16014a88654ee043

  • SHA256

    b81ce1757e7d279ca226e752baa9422622119a49e8364866b91667301c74e589

  • SHA512

    969c1789142c9ad646c4232e8f46ebf0bae4d0f20ba25d4d30b32a0a263917a65584bc5f2eb4145ead0a80453f168ceae4c4a12078a43fdd2fa504239e2eb036

  • SSDEEP

    6144:1T1htGytvUf4yclQgx7+8DfpedxbKT3F9opcVyFW4Es+CS/wUcvzUjSa5pK2mKd4:TP+8DpFTvodFB4/8vYjDpK8atfx8hDu

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Loads dropped DLL

  behavioral1behavioral2