Extracted

• • Target

    Payment Channel.exe

  • Size

    501KB

  • MD5

    646849ab728ff631b3c70480638e6a2a

  • SHA1

    8f9f70ef43add2a45e0a2430b2d9680616faef8b

  • SHA256

    b8e4bcb3699104e49979cc86b84ce278bd6b9b392d65d465ac1acd7808ed0db0

  • SHA512

    32f0a0949c33e0b34239581bbb86d3ee42acdaddc9856c78a55b88924dcade166663e2c8345040dbc2f383b74ebda88e952d9091643d8a7ea8e5d1fd82002de3

  • SSDEEP

    12288:7Ycs+XKy/AZe+e9AP8LP810o4HfyNQlQj0DunOq0Mte9oIopkyd+wMeMIC10pqT1:7Ycs+XKy/AZeJ9AP8LP810o4HfyNQlQM

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2