Extracted

• • Target

    Tax Payment Challan.exe

  • Size

    597KB

  • MD5

    dd1d64884898d506bf90c29890f1b4bc

  • SHA1

    e1ea541eb0a3ab8670e77d124da4ceb4b8febc9b

  • SHA256

    d2aab40a9073aa3f2970017b652e4d42e34ad11c5505994ba8945013aedac69e

  • SHA512

    bf5fa648c0fe45b346a50bbb5b8fd0ff7af5aa17df3a3a37df03f6d76ebcd35b6906851e1138bd111c1010815c4f31aaaa5f00fa44f73d648e32e6592c500f99

  • SSDEEP

    12288:TK1aFT8EUJHvXH/Xgx46A9jmP/uhu/yMS08CkntxYReaL:TBYLJvXH/wqfmP/UDMS08Ckn3o

  Score

  10^/10

  kutakikeyloggerstealer

  • Kutaki

    Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    stealerkeyloggerkutaki

  • Kutaki Executable

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Executes dropped EXE

  behavioral1