Resubmissions

10-07-2023 09:41

230710-ln791sae9y 10

10-07-2023 09:39

230710-lmwjtsae8y 10

General

  • Target

    WESTERN.zip

  • Size

    2.1MB

  • MD5

    b8ae580296be935fe8ee8e41a59335aa

  • SHA1

    1f6dfb78f2a2b76174f9ce7b30d1f4e31611a84e

  • SHA256

    b76080d069eb6c4f941b61154852d2000dd53db0f120827b81643f0dd9480c4e

  • SHA512

    771123766fa2d893ca0ba1a03a358c17172f21181e1043698ed68789bfb370b18bddf457605947b7296c4d56ab6b89709a4fff47fba66034d19b4e603935889b

  • SSDEEP

    49152:kVQiOQCRbrjDwrazYGL6oMsoVnpW0vjAz7vhW6pUJmR/IK8R8:yOXb3DwrazYTBsuWwMqJmR/IK8O

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WESTERN.zip
    .zip
  • WESTERN.zip
    .zip
  • WESTERN.cmd
    .exe windows x86

    0b5c1fbaf1e71179da82352902e00080


    Headers

    Imports

    Sections