Overview

overview

10

Static

static

10

E-Invioce_23894.exe

windows7_x64

3

E-Invioce_23894.exe

windows10-2004_x64

3

Resubmissions

14/07/2022, 15:43

220714-s5y61acbd210

13/06/2022, 10:06

220613-l43dpsfedl10

Sharing

Copy URL Twitter E-mail

General

  • Target
    E-Invioce_23894.cmd
  • Size 1.5MB
  • Sample220714-s5y61acbd2
  • SHA256 56dd24957c30f559a8ff2daac9d648242e8189495d354bc93d7cbe6625596383
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
kutaki

Malware Config

Extracted

Family

  • kutaki

C2

  • http://ojorobia.club/laptop/laptop.php

  • http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family
    kutaki

File Explorer

  • E-Invioce_23894.cmd
    .exe 1.5MB

E-Invioce_23894.cmd

  • IMPHASH 67f310695ece8f1856c07ea3008696c1
  • SHA256 56dd24957c30f559a8ff2daac9d648242e8189495d354bc93d7cbe6625596383
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • Kutaki Executable

Minor OS version
Major OS version
Entry point
4684
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths