Resubmissions

14-08-2023 09:10

230814-k42lqsba53 10

10-07-2023 04:45

230710-fdwwcagg23 10

General

  • Target

    GETTING UP.zip

  • Size

    2.1MB

  • MD5

    6cac1435c08e380a10e3dae5f9d7655f

  • SHA1

    e88b5d7e076aed33d9f32257335b64694a7e84be

  • SHA256

    976a7fefb48c81afeaf9255f02201d65a353035b9bed7c8667de7df8b44b1421

  • SHA512

    577ae318875e63d85f0e3d7e97337a5c32438754cd1dacf68dbe3df0ae0bacd3b35be31e4a56c99014656a5bc40e67c54efddfb3410190339fe445800f129def

  • SSDEEP

    49152:smOkBN7cOL80efs2t6SbQHd5U0nzbOEkTV+E91RrjKDOnSULhqJmR/IK8RN:s3k3QC85sm9GzbOEu3XqDOnSULAJmR/y

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GETTING UP.zip
    .zip
  • GETTING UP.zip
    .zip
  • GETTING UP.cmd
    .exe windows x86

    0b5c1fbaf1e71179da82352902e00080


    Headers

    Imports

    Sections