General

  • Target

    SecuriteInfo.com.Variant.Symmi.62789.26421.19729

  • Size

    1.3MB

  • MD5

    5e10013ea2325b25d71fa7731b150c50

  • SHA1

    3dc974c7eb43e2728b0dc660915e222f04d21800

  • SHA256

    ac08f85dffd331e7c9b5a4ff14b4518b4ad1220effd27215ac827bb2278bbb74

  • SHA512

    2ea4216048cceec7ba4e905abd9fd8eef54c24f5b10fb7162dd66e16e5d9c02195c5db6f32fbe9fa02a37fc217dc6d817131637eebb137e854ae3fa82ab36a93

  • SSDEEP

    24576:UtGkWYldr5HE+wS7aPK3v9oE3IfFAnQDXFzCfmP/UDMS08Ckn3H:7kWk5cS7a+9XYaQzFzCfmP/SA8N3

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://ojorobia.club/laptop/laptop.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family

Files

  • SecuriteInfo.com.Variant.Symmi.62789.26421.19729
    .exe windows x86

    54ad52e3d9970728d298cd695e3f6331


    Headers

    Imports

    Sections