kutaki | 176ab2891b1ad76677d9495d86112b0b

General

Target
176ab2891b1ad76677d9495d86112b0b
Size 412KB
Sample220922-2he92scee6
SHA256 ba29bda31111ba22d9c9ee00201e1f09c911501efd6555fce54ec2e7bde89d25
MD5 176ab2891b1ad76677d9495d86112b0b
SHA1 cc036b8d04438640932741642fc908dd18b56f85
SHA512 42b476f0fc30ec72c653de3fb50f991c6213c94ce9104ae136c15ff191fef8dfb1878ef4c921e280b7f618f15d8cb27fd5882dd338ab5d377b72a4b8117cd34f
SSDEEP 12288:0KN96H8SGfbB9oGVr0Tlt7XP1gX04l8tFvoK8Le0:0/H8BfbBO5txgErdGV
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kutaki

Family

C2

Kutaki Executable 1 IoCs

resource	yara_rule
static1/unpack002/Payment Confirmation.exe	family_kutaki

SHA256 ba29bda31111ba22d9c9ee00201e1f09c911501efd6555fce54ec2e7bde89d25
MD5 176ab2891b1ad76677d9495d86112b0b
SHA1 cc036b8d04438640932741642fc908dd18b56f85
SHA512 42b476f0fc30ec72c653de3fb50f991c6213c94ce9104ae136c15ff191fef8dfb1878ef4c921e280b7f618f15d8cb27fd5882dd338ab5d377b72a4b8117cd34f
SSDEEP 12288:0KN96H8SGfbB9oGVr0Tlt7XP1gX04l8tFvoK8Le0:0/H8BfbBO5txgErdGV
MD5 SHA1 SHA512 SSDEEP

IMPHASH a33ba303a37edb6054cbc630a168ae34
SHA256 3de1ccba9149c85aea890f3e20a4e8908ecc5fc143d66ebaf195f597d032f122
MD5 6194e97f02193b30006bb56c1d85ad26
SHA1 a42a91469fea64a4d14cafa0ef8e30208490499f
SHA512 69d5f949df9f08c82377e46b25b8b7fb65ad2f47f1cddc3dc35b2557fb63372fe838dfcf7cfa24ae0900107a03e1892e1aa83c5e035934427fe5560f53c1083c
SSDEEP 6144:1L0VwchW4Es+CS/wUcvzUjSa5pK2mKdl0TruunfD09gfJChgGJhCj:1L0LB4/8vYjDpK8atfx8hDu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4684

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths