kutaki | 0947b3ecce068d697ef61087acdf9791

General

Target
0947b3ecce068d697ef61087acdf9791
Size 1.2MB
Sample220801-mpdmgafdg2
SHA256 2b322f4e53d8e70e2f3a53d4024b2f96fb029e0563c78f1efc0e18f742a5c5a5
MD5 0947b3ecce068d697ef61087acdf9791
SHA1 2d0b73fa23441479fe328df4384ea1bde8835392
SHA512 453ae643d0c56a431c22c9fb120b4c48077630b7249879268fb60284a5c66e7345624ef829ecc8fbc05cafd330a665d1ae9cca768e9dff4d1b0abab9b88562b3
SSDEEP 24576:3/cFwlAskLAA9/ACZ7cLwuUkyP5/5xxx8oLUmr1lmd/6rMW08ukn9f:30F7fAA+CZ7c2kyP5P8MBlmd/ES8JJ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kutaki

Family

C2

Kutaki Executable 1 IoCs

resource	yara_rule
static1/unpack001/NEFT_Payment.exe	family_kutaki

SHA256 2b322f4e53d8e70e2f3a53d4024b2f96fb029e0563c78f1efc0e18f742a5c5a5
MD5 0947b3ecce068d697ef61087acdf9791
SHA1 2d0b73fa23441479fe328df4384ea1bde8835392
SHA512 453ae643d0c56a431c22c9fb120b4c48077630b7249879268fb60284a5c66e7345624ef829ecc8fbc05cafd330a665d1ae9cca768e9dff4d1b0abab9b88562b3
SSDEEP 24576:3/cFwlAskLAA9/ACZ7cLwuUkyP5/5xxx8oLUmr1lmd/6rMW08ukn9f:30F7fAA+CZ7c2kyP5P8MBlmd/ES8JJ
MD5 SHA1 SHA512 SSDEEP

IMPHASH 5e021a089f0d5edc7c869054a1847d9c
SHA256 c7e3deb446233da1eb6c6df66913065773d510a21750a9ea675b69be46ab245a
MD5 70e966394bf9947ff01b681bab9d0f71
SHA1 53946411e4e975a9ed354b16cd22041108e9f596
SHA512 a71a0b9b265b3c31c01305b121b386b8beb14cb6f670df4cbdad3d2fb7a3b3c508b25b48b253cba4c9aacde77e47fc32481fdc4cfc9221af83ea90ab7a6fc200
SSDEEP 24576:VckWYldr5HE+wS7aPK3v9oE3IfFAnQDhQSAd1chu6mfmP/UDMS08Ckn3I:akWk5cS7a+9XYaQ6d+hu6mfmP/SA8N4
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4692

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths