Extracted

• • Target

    217edd398f416851e2cbc52f868735c9.exe.bin

  • Size

    521KB

  • MD5

    217edd398f416851e2cbc52f868735c9

  • SHA1

    9bc4c13a5747101b3ecefcc9bbc6e558bb97adec

  • SHA256

    d2f8b78d8bc87cb6a703b593213573c850d37c146775cdc3bff274d1c929de34

  • SHA512

    4d1d7a9aea4fea33495048a28a3ea3d90c6a1c2ef470588feb033fe6be8ab40d0d846a03181521a6f510fe918236b62099bdd64973b0ce841b13c9ea8e7b05d1

  • SSDEEP

    12288:K6LK18Gnl3Pw9Yi46A9jmP/uhu/yMS08CkntxYRTL:K6L5Gnl3HfmP/UDMS08Ckn3C

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2