Extracted

• • Target

    TSD.exe

  • Size

    649KB

  • MD5

    2574234ccd8503284e9d4d910e39e132

  • SHA1

    aa7943ef2c8979d4daf653b056649a5dff0718c0

  • SHA256

    8be47965011a00d57e60ab3b16c89fabb9cfc3b4e9330044853711fa4166617c

  • SHA512

    e9ac30e44040e375f1394a2b8ab8a8c113b1e94119d328e2730e85c1b5a2bf3ac731f91dc68eca4cae8722109b04193f228fc0433e40bc57fadc6fc78ecdcbe7

  • SSDEEP

    12288:B6UaeOpx41/an46A9jmP/uhu/yMS08CkntxYRML:kLeza4fmP/UDMS08Ckn3z

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2