kutaki | 7855056168[.]zip

General

Target
7855056168.zip
Size 2.8MB
Sample220818-r2ccdsaha2
SHA256 507a850616e8fec0600a8973ae9dc6bde0a07b8e68953fa74a760ccebef77f4e
MD5 278f77cecff4992da3d3218f1f94d58e
SHA1 2b9b987127db5a00fa1b391c6eb812f2ea4dd512
SHA512 0b247580a96b55f80bc5b4ea73596c36c593edae604af7ec06b725b69972f0a6f52daa4a3d5b2b4f2b98d83ae6828025d452d0c06a5cda2b373904fe004b609f
SSDEEP 49152:CBUf1BK9CsG7GB+YKx9KsSfrwty/HZP6qfzOydMy/1I+9+1D5szWl+uigvK6HGg5:qUf1BKwsn+Ycer2gyLo3qzd5tlZiQSg5
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kutaki

Family

C2

Kutaki Executable 1 IoCs

resource	yara_rule
static1/unpack001/df8c4a61667091f9101ad764708b7d70398842bceef21b13729c32f8db48dcd3	family_kutaki

SHA256 507a850616e8fec0600a8973ae9dc6bde0a07b8e68953fa74a760ccebef77f4e
MD5 278f77cecff4992da3d3218f1f94d58e
SHA1 2b9b987127db5a00fa1b391c6eb812f2ea4dd512
SHA512 0b247580a96b55f80bc5b4ea73596c36c593edae604af7ec06b725b69972f0a6f52daa4a3d5b2b4f2b98d83ae6828025d452d0c06a5cda2b373904fe004b609f
SSDEEP 49152:CBUf1BK9CsG7GB+YKx9KsSfrwty/HZP6qfzOydMy/1I+9+1D5szWl+uigvK6HGg5:qUf1BKwsn+Ycer2gyLo3qzd5tlZiQSg5
MD5 SHA1 SHA512 SSDEEP

Password

infected

IMPHASH e715f3c5058fd2de28211e01a1b3ec74
SHA256 df8c4a61667091f9101ad764708b7d70398842bceef21b13729c32f8db48dcd3
MD5 d34766180061c5b0e65b4d37274be18a
SHA1 7bfceba0bd7de874ea91543bcd4da45d1f01bba1
SHA512 ef0f19dda7bb1f74d35261de05d8744233fff365a82ee11e4a0d0e3037c9f57c0fa23b82b01923487bf8551fd99bc83499edac03c1c0b009f7525f20101107b9
SSDEEP 49152:8d7p3y/X7eQyNlFnGd7p3y/X7eQyNlFnoAqwE5Lrm4LOEQP4sd7p3y/X7eQyNlF2:8dFlsdFlLLE5LrmhE+4sdFlkfmP/SA8/
MD5 SHA1 SHA512 SSDEEP

windows x86

Password

infected

Minor OS version

Major OS version

Entry point

4684

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths