kutaki | 0c78322817eb54c31659eb3ea8b2de29c045ab29e2db80cada6bd11bc1b48946

General

Target
0c78322817eb54c31659eb3ea8b2de29c045ab29e2db80cada6bd11bc1b48946
Size 1.1MB
Sample220529-3txh5seee6
SHA256 0c78322817eb54c31659eb3ea8b2de29c045ab29e2db80cada6bd11bc1b48946
MD5 4caebe06a29f139244f1dbabce06db7a
SHA1 b846fe335114a011ae0603c4cf46d8294e39a62a
SHA512 e250676d0fc96264146020454deb35c8b65587156df0cd0d4dbde3a8ada4700d5e7abc48f0a237bdf5d682d7c7745b4744d8c11959811f27850246443ee9d33b
SSDEEP 24576:uY4Vv3W+AyA/cayWpFVG96r1/kGlVZshDhwZ:QALdFU9E19lPshwZ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kutaki

Malware Config

Signatures

Kutaki Executable 1 IoCs

resource	yara_rule
sample	family_kutaki

Kutaki family
kutaki

File Explorer

0c78322817eb54c31659eb3ea8b2de29c045ab29e2db80cada6bd11bc1b48946

.exe 1.1MB

0c78322817eb54c31659eb3ea8b2de29c045ab29e2db80cada6bd11bc1b48946

IMPHASH 23028877b3ded4155a8cd065c88d1374
SHA256 0c78322817eb54c31659eb3ea8b2de29c045ab29e2db80cada6bd11bc1b48946
MD5 4caebe06a29f139244f1dbabce06db7a
SHA1 b846fe335114a011ae0603c4cf46d8294e39a62a
SHA512 e250676d0fc96264146020454deb35c8b65587156df0cd0d4dbde3a8ada4700d5e7abc48f0a237bdf5d682d7c7745b4744d8c11959811f27850246443ee9d33b
SSDEEP 24576:uY4Vv3W+AyA/cayWpFVG96r1/kGlVZshDhwZ:QALdFU9E19lPshwZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Kutaki Executable

Minor OS version

Major OS version

Entry point

14936

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaStrI2 ord690 _CIcos _adj_fptan __vbaStrI4 __vbaHresultCheck __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaStrVarMove __vbaLenBstr ord696 __vbaPut3 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 ord698 __vbaNextEachVar __vbaFreeObjList ord516 __vbaVarIndexLoadRef __vbaStrErrVarCopy _adj_fprem1 ord518 __vbaRecAnsiToUni ord626 ord519 __vbaForEachCollAd __vbaVarCmpNe __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord666 __vbaAryVar ord667 __vbaAryDestruct ord591 __vbaVarIndexLoadRefLock ord593 __vbaVarForInit __vbaExitProc ord594 __vbaStrLike ord595 __vbaObjSet __vbaOnError ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 __vbaForEachCollVar __vbaStrFixstr ord520 __vbaRefVarAry __vbaFpR8 __vbaBoolVarNull _CIsin __vbaErase ord631 __vbaVarCmpGt __vbaVargVarMove ord632 ord525 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError __vbaGet3 ord529 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaPutOwner4 __vbaNextEachCollVar ord561 __vbaPrintObj __vbaI2I4 __vbaObjVar DllFunctionCall ord563 __vbaVarOr ord670 __vbaVarLateMemSt ord564 __vbaLbound _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd __vbaR8Cy __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 ord601 __vbaUI1I2 _CIsqrt __vbaObjIs __vbaVarAnd EVENT_SINK_QueryInterface __vbaStr2Vec __vbaUI1I4 __vbaExceptHandler ord711 ord712 __vbaPrintFile __vbaStrToUnicode ord713 _adj_fprem _adj_fdivr_m64 ord714 ord607 ord608 ord716 __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord534 __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVarLateMemCallLdRf __vbaVar2Vec __vbaInStr ord570 ord648 __vbaR8Str __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaVarSetObj ord573 __vbaStrCopy __vbaI4Str ord681 __vbaVarCmpLt __vbaFreeStrList ord576 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var ord689 __vbaVarCmpEq __vbaFpCy __vbaAryLock __vbaVarAdd __vbaLateMemCall ord611 __vbaStrComp __vbaVarDup __vbaStrToAnsi ord616 __vbaVarLateMemCallLd __vbaFpI4 ord617 __vbaLateMemCallLd _CIatan ord618 __vbaAryCopy __vbaCastObj __vbaStrMove __vbaForEachVar ord619 __vbaStrVarCopy __vbaR8IntI4 _allmul _CItan __vbaNextEachCollAd __vbaAryUnlock __vbaUI1Var __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing