kutaki | 12869439e685998781384fdaf2c391675a364dc4bbcdd44123fe2d74f2852a61 | Triage

Submit
Reports

Overview

overview

Static

static

fa042e8a0d...18.exe

windows7-x64

fa042e8a0d...18.exe

windows10-2004-x64

7

Sharing

General

Target

fa042e8a0d68b71d32f542f32867b540_JaffaCakes118
Size

840KB
Sample

240927-jr3gtsvglf
MD5

fa042e8a0d68b71d32f542f32867b540
SHA1

47782c5a168077e676e1cb7cbcd5776d012544cd
SHA256

12869439e685998781384fdaf2c391675a364dc4bbcdd44123fe2d74f2852a61
SHA512

ea605a2585fbf464c32b18b6b03053edbf3082e4b82f1462feca62374eea1d27b8366962543783ec540e2ce8f5f6ad6dc9d57b8de63af5f76e80c069b1f34d73
SSDEEP

24576:jMq1NY2oyR2I7NlC/VG96r1/kGlVZshDhwd:wye/U9E19lPshwd

Score

10^/10

kutaki discovery keylogger stealer

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

fa042e8a0d68b71d32f542f32867b540_JaffaCakes118.exe

Resource

win7-20240903-en

kutaki discovery keylogger stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

fa042e8a0d68b71d32f542f32867b540_JaffaCakes118.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  fa042e8a0d68b71d32f542f32867b540_JaffaCakes118
- Size
  
  840KB
- MD5
  
  fa042e8a0d68b71d32f542f32867b540
- SHA1
  
  47782c5a168077e676e1cb7cbcd5776d012544cd
- SHA256
  
  12869439e685998781384fdaf2c391675a364dc4bbcdd44123fe2d74f2852a61
- SHA512
  
  ea605a2585fbf464c32b18b6b03053edbf3082e4b82f1462feca62374eea1d27b8366962543783ec540e2ce8f5f6ad6dc9d57b8de63af5f76e80c069b1f34d73
- SSDEEP
  
  24576:jMq1NY2oyR2I7NlC/VG96r1/kGlVZshDhwd:wye/U9E19lPshwd
Score

10^/10

kutaki discovery keylogger stealer
- Kutaki
  Information stealer and keylogger that hides inside legitimate Visual Basic applications.
  stealer keylogger kutaki
- Kutaki Executable
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

kutakidiscoverykeyloggerstealer

behavioral2

© 2018-2024

Terms | Privacy