Extracted

• • Target

    Receipt.exe

  • Size

    521KB

  • MD5

    3c44c9045db8891afbd59a812a5a535b

  • SHA1

    cadb3a94b3a84b6d375b9f3225973a2aff690642

  • SHA256

    2b230a2d05aeb0a05373055d4cef9d25450779b60d7cf8a399ac2b4b373df5a7

  • SHA512

    78a7ce8b53a97d9c06c8a447db8478bf42400e3c2c4bd8206c1859c2538a9e35fb4dcb75767df179e34229f4ee2c9ec39670ad0b1503e5b46f2bb9d7f83d644f

  • SSDEEP

    12288:+j1IXFF+ylEzw46A9jmP/uhu/yMS08CkntxYRnL:wIXFgXfmP/UDMS08Ckn3K

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Loads dropped DLL

  behavioral1behavioral2