General

  • Target

    CLOSING UP.zip

  • Size

    2.1MB

  • MD5

    9361922072e8b623ac471d891e2c9ff0

  • SHA1

    bc55e69097da0625b6f7a41d5486fe4e8f45de8f

  • SHA256

    0c4a667d2ee5f0fe0aa4e835dd6f00693feef4ed2b652f0ba5d59c872f260a94

  • SHA512

    8b86f70f621761c72fe0ac3d944c7f3a0f250db38ea72bed8bf3170423df23a7eaec001e98fe90e00267bfe0c3a547ec6294e65a9cfdd554a4730524a766b96b

  • SSDEEP

    49152:eeNtDMSNWQreymW6AuaMlkx9A9BZCUPJmR/IK8R8:ee7DFWQreymW68TAjZCUPJmR/IK8e

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CLOSING UP.zip
    .zip
  • CLOSING UP.zip
    .zip
  • CLOSING UP.cmd
    .exe windows x86

    0b5c1fbaf1e71179da82352902e00080


    Headers

    Imports

    Sections