Extracted

• • Target

    Tax Payment Confirmation.exe

  • Size

    501KB

  • MD5

    229542167bc737c7ceec0394cb8eae67

  • SHA1

    b1fdf16782bee715faf2fe7f1581272793708e08

  • SHA256

    09caf68ad8cb1a459675913732e7191285d03e7b83e244b5ddce69e0b97c1fc5

  • SHA512

    7d8995c724c598de8a05e7f5ea2e50f1583dcfc5611143ac4290bc8a77eeeecf3e3fd55acc687b92bc4745f7e194487f0c21504a695b95dcb9eaebb048da5d5d

  • SSDEEP

    12288:gYcs+XKy/AZe+e9AP8LP810o4HfyNQlQj0DunOq0Mte9oIopkyd+wMeMIC10pqTD:gYcs+XKy/AZeJ9AP8LP810o4HfyNQlQS

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2