General

  • Target

    Inv No 46281.zip

  • Size

    2.2MB

  • MD5

    1d966f996dcd93c1a98c9b3c4142c246

  • SHA1

    4d443c9a609d3a7b7842dee42d36b939c3137a59

  • SHA256

    9dab6775890cec31194c3c7d2e0b2e6454806d2f9e5762f501e0cd1c1da8cafa

  • SHA512

    bb2cb6a0d95960bbc33d4c7ce8c32f71575b9e63e54bdd8831f84f8423fe0db02b9c2188b6d40155815d4bb58414eeeccd59e2304d7688ecdfc40c3dc5535f1e

  • SSDEEP

    49152:shlTifGPIyObvUM17hGrax76H9ML1n7126pgULSh7Bw638TqxgETmB/c283QCPQ:sHGuyg2weR6mLN715LSV2yEqxTmB/c2b

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Inv No 46281.zip
    .zip
  • Inv No 46281.bat
    .exe windows x86

    71d1d5bcde51f744bf97b431d90e3bd7


    Headers

    Imports

    Sections