General

  • Target

    4151bfdd1db1f0f693ee701d8d0f329d49992b2169ac251089335296cb3b4c96

  • Size

    4.5MB

  • MD5

    09217841988e0cdb9c6a62c2ce8042cb

  • SHA1

    e6ff53302c09b0ffe4b9c3115d9fe924b485a13a

  • SHA256

    4151bfdd1db1f0f693ee701d8d0f329d49992b2169ac251089335296cb3b4c96

  • SHA512

    e5cb5aa8d311ab15649c72c0ec648e6ba7579db5a6ab7364cf28d100508606654cab542ef23c803504e0322388e4ef2cff8c146aad2b30a2df667c122df8305e

  • SSDEEP

    49152:HITFwuUfkWk5cS7a+9XYaQkZehc4mTYJ78V9gyBn4cBfmP/SA8N:oTwXajJ3Z942KQV9hp4QfmP/SA8

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4151bfdd1db1f0f693ee701d8d0f329d49992b2169ac251089335296cb3b4c96
    .exe windows x86

    cad98863dfa1fc2a54a1b34966e0ec1a


    Headers

    Imports

    Sections