kutaki | SecuriteInfo[.]com[.]Variant[.]Ursu[.]936368[.]29716[.]1589

General

Target
SecuriteInfo.com.Variant.Ursu.936368.29716.1589
Size 3.8MB
Sample220822-d4ryzadba7
SHA256 f0f262dfeee40f1a3a03cbb571cd4cc9bd526420b81bff511f44dec6c5f197fb
MD5 8ab6693f33e00239c878ff850124c00f
SHA1 04401b374b72bc18956efc93bccbc37f80970d0f
SHA512 ed1adcdc71695c474c09d5f5e440d0c856b5b67db88943b29c4a8254dd4d815437ad0490209be6ea048e2b90292909c032753b6b03a536a21037f619251faab2
SSDEEP 98304:0h8I5Rmg0phI7SRhGfj+HGjamWen0nuIjt1glI5OkfmP/SA86:0OaqaSRO+HGj+en0tg2kOmnSh6
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kutaki

Family

C2

Kutaki Executable 1 IoCs

resource	yara_rule
sample	family_kutaki

IMPHASH 1d6dab2977d8b9bdfad40ac2f3aeb58d
SHA256 f0f262dfeee40f1a3a03cbb571cd4cc9bd526420b81bff511f44dec6c5f197fb
MD5 8ab6693f33e00239c878ff850124c00f
SHA1 04401b374b72bc18956efc93bccbc37f80970d0f
SHA512 ed1adcdc71695c474c09d5f5e440d0c856b5b67db88943b29c4a8254dd4d815437ad0490209be6ea048e2b90292909c032753b6b03a536a21037f619251faab2
SSDEEP 98304:0h8I5Rmg0phI7SRhGfj+HGjamWen0nuIjt1glI5OkfmP/SA86:0OaqaSRO+HGj+en0tg2kOmnSh6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4732

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths