Resubmissions

14/07/2022, 15:42

220714-s5pybscbc910

20/06/2022, 03:33

220620-d37b9sdbbm10

General

  • Target
    SecuriteInfo.com.Variant.Symmi.62789.8540.1961
  • Size 1.0MB
  • Sample220714-s5pybscbc9
  • SHA256 b12fa782c5a1e950d3a2a2ae57bb843c56efe1994f25a02fd088f312ea8523bc
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • kutaki

C2
  • http://ojorobia.club/laptop/laptop.php

  • http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family

File Explorer

  • SecuriteInfo.com.Variant.Symmi.62789.8540.1961
    .exe 1.0MB

SecuriteInfo.com.Variant.Symmi.62789.8540.1961

  • IMPHASH f22edd41a8fa1aa8e687890bccb23634
  • SHA256 b12fa782c5a1e950d3a2a2ae57bb843c56efe1994f25a02fd088f312ea8523bc
  • MD5 SHA1 SHA512 SSDEEP
  • Kutaki Executable

Minor OS version
Major OS version
Entry point
4732
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths