Netskope Threat Labs

Kotuluk

ATP Sandbox Adv. HeuristicsAV

Kotuluk is a macro virus that infects Microsoft Office documents and uses obfuscated VBA code to evade detection.

First seen
February 2022
Last seen
October 2026
Alert Name
Script-Macro.Trojan.Kotuluk
Script-Macro.Virus.Kotuluk
VBA.Heur.Kotuluk.1.00BBE1FE.Gen
VBA.Heur.Kotuluk.1.013F0C37.Gen
VBA.Heur.Kotuluk.1.013F0C37.Gen:6790E
VBA.Heur.Kotuluk.1.015BBF0D.Gen
VBA.Heur.Kotuluk.1.023DB007.Gen
VBA.Heur.Kotuluk.1.02F1189F.Gen
VBA.Heur.Kotuluk.1.02F90E58.Gen
VBA.Heur.Kotuluk.1.03919F31.Gen