kutaki | SecuriteInfo[.]com[.]Variant[.]Bulz[.]342535[.]8726[.]4736

General

Target
SecuriteInfo.com.Variant.Bulz.342535.8726.4736
Size 4.3MB
Sample220818-kf1drsfaa6
SHA256 7f14f5b831d5c9b212fb43f420c5b685fb5be173564dfb4edff70e29e5a0d306
MD5 a267d58bf6913e3c289d452109f88f06
SHA1 9413185764215de2c35d250b61bba0978f41fbab
SHA512 ef1e0bef585633ca98a9ad1ef7c2674ba9e61a5ff7936cbcf549578f7e07d93c9dc6c0fb17e474efd14d0ed2953961503cb7fa1b21e9c68409fc7a930a3193bb
SSDEEP 49152:Id7p3y/X7eQyNlFnGd7p3y/X7eQyNlFnoAqwE5Lrm4LOEQP4sd7p3y/X7eQyNlFX:IdFlsdFlLLE5LrmhE+4sdFlbfmP/SA8R
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kutaki

Family

C2

Kutaki Executable 1 IoCs

resource	yara_rule
sample	family_kutaki

IMPHASH e715f3c5058fd2de28211e01a1b3ec74
SHA256 7f14f5b831d5c9b212fb43f420c5b685fb5be173564dfb4edff70e29e5a0d306
MD5 a267d58bf6913e3c289d452109f88f06
SHA1 9413185764215de2c35d250b61bba0978f41fbab
SHA512 ef1e0bef585633ca98a9ad1ef7c2674ba9e61a5ff7936cbcf549578f7e07d93c9dc6c0fb17e474efd14d0ed2953961503cb7fa1b21e9c68409fc7a930a3193bb
SSDEEP 49152:Id7p3y/X7eQyNlFnGd7p3y/X7eQyNlFnoAqwE5Lrm4LOEQP4sd7p3y/X7eQyNlFX:IdFlsdFlLLE5LrmhE+4sdFlbfmP/SA8R
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4684

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths