Extracted

• • Target

    7ff7b7eedc089b658ba80ec8cb0748f9.exe

  • Size

    453KB

  • MD5

    7ff7b7eedc089b658ba80ec8cb0748f9

  • SHA1

    1840814d053eb5327e68db983215316008e84bdb

  • SHA256

    1a3baff7083619571a375795049718bc745e555a25ea3e248848c536671fef35

  • SHA512

    5c370ad1314d4d0c66aad6518b93ecba45835766feabd26bada33e6b6aa4ba68ff766257db0f91f2643a680fbbf061bf99185dfc5e55fec20a9e86c7256b4472

  • SSDEEP

    12288:+U4Tisi246A9jmP/uhu/yMS08CkntxYRPL:lDsKfmP/UDMS08Ckn3K

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Loads dropped DLL

  behavioral1behavioral2