Overview

overview

10

Static

static

10

IncomeTax_Receipt.exe

windows7-x64

10

IncomeTax_Receipt.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    IncomeTax_Receipt.zip

  • Size

    654KB

  • Sample

    221025-l984faccg4

  • MD5

    c550689d0013632603e088318728484d

  • SHA1

    010f41fc01c59bcf6ff0cf96c25fe941e466e33c

  • SHA256

    cae9f198df106768c911029ef9dd41fc90a0fd482edabbc31a1eab6d31b92890

  • SHA512

    d49f1417d487ed880eed6d1ff5da4d6dcb001282a43c3fdc0a621d7f253d79db3bd376c548580dc6ff1a707d4496de767858ccb2a105a19cb480eae14084967f

  • SSDEEP

    12288:4/xekwlLTDKhyBLUJ+M0DKKDRw1Mq1zMrzMK4xe4+A9jm7/uhq/yMG08Ckn9ZYRE:4oTpBLO++1Mq14rIK4xpjm7/UpMG08CM

Score
10/10
kutakikeyloggerstealer

Malware Config

Targets

    • Target

      IncomeTax_Receipt.exe

    • Size

      1.4MB

    • MD5

      144d5d049c409c97f72fdf80071fda7a

    • SHA1

      1699e0433c2bf8b2c986de4376bab92865fa1dac

    • SHA256

      d839c7617c80517cdc500d6c52a3d4cfe3f2f5d587d0b6c5c5ccff094c12ea3a

    • SHA512

      e4b86d46b5c5a179a5a072c39ca2d5bcbfdc5cbc2a161c2b2d8aa738360b6cf9d2e326da46d37758b062084efcfc7005c78b385a331f96b3c519ea3e9eda69ed

    • SSDEEP

      24576:ZSy4uqCSN5l3ksJb7tb1Fdv11jfmP/UDMS08Ckn3/:8yMlzfmP/SA8Nv

    Score
    10/10
    kutakikeyloggerstealer

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

      stealerkeyloggerkutaki

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks