Overview

overview

10

Static

static

10

7177cf9f39...1).zip

windows7-x64

1

7177cf9f39...1).zip

windows10-2004-x64

1

7177cf9f39...29.exe

windows7-x64

10

7177cf9f39...29.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7177cf9f393364d37caa1cf3d970bd5381333fb655ec3f83becdb8c4861ed429 (1).zip

  • Size

    423KB

  • MD5

    8b86c917ba830a8b4b079dac766f8215

  • SHA1

    da98299aaff7a8de1bd66aefab7c458ff7279128

  • SHA256

    ad4105a0782f6efc19aa2b31dd763f9059baf00a517ea3b8a8d0636363faf000

  • SHA512

    4be015749384ba1ab89f03ef985fb44a178154ffdac8a9a87d32091ad47ccc0a915c61ac2371d9b4c95cb1b68a660e4e37b83a5cded2a2df65e5a6ea7930e2e4

  • SSDEEP

    12288:M9BVx8pDVSYIxrH3FBaZSXISieH4TnC5jQJEy8:sVQMYItXPaZKPHwI2Ey8

Score
10/10
kutaki

Malware Config

Extracted

Family

kutaki

C2

http://newloshree.xyz/work/son.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family
    kutaki
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7177cf9f393364d37caa1cf3d970bd5381333fb655ec3f83becdb8c4861ed429 (1).zip
    .zip

    Password: infected

  • 7177cf9f393364d37caa1cf3d970bd5381333fb655ec3f83becdb8c4861ed429.exe
    .exe windows:4 windows x86

    92ea9227782f0ce87ec7d6acf15fa241


    Headers

    Imports

    Sections