General

  • Target

    vykyfqfk.bin.exe

  • Size

    2.6MB

  • MD5

    9c55c5482f2599282613a9677dc9010c

  • SHA1

    441e9706756e28d2112f60e1a5fe3c0ed4368a8c

  • SHA256

    c8bc425f3201c25f61942597a5bd5f7ca2410a9c04811ae0180cb047d7701f43

  • SHA512

    07c8da517ad919df750a1c1a13007583be76e8f113960e76f6c1b984b63710ea0ebf3966ce06aef19575fe0a7008bbe2bd802578f8ceb1b6b92b1cc03dd3f19a

  • SSDEEP

    49152:zbYHwQf1ukWk5cS7a+9XYaQtZehc4mTYJ78V9gyBn4cgfmP/SA8N9bYHwQf1:zbnajJ2Z942KQV9hp4BfmP/SA8nb

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • vykyfqfk.bin.exe
    .exe windows x86

    71d1d5bcde51f744bf97b431d90e3bd7


    Headers

    Imports

    Sections