Overview

overview

10

Static

static

10

E-FILLING FORM B.exe

windows7-x64

3

E-FILLING FORM B.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94729e2f3839b40af5d038286ca722c4.bin

  • Size

    2.1MB

  • MD5

    2f47463153ac368508b8b5e1643ad461

  • SHA1

    cdb74a038d18ed613e37775534f32957c8ab9ed7

  • SHA256

    5fa06bb29c9df080ea7d0428bfa96e3f5e7b7dec0f3d83689b623007f5965bbc

  • SHA512

    22a541e255885494cfce11ea9cb48bb7a833ba91cf8d95336e7b5e3cd5857ba68d463f594da341971068dbbdd40588bc008f4d2151c3065dd9ce5e3c5cd46162

  • SSDEEP

    49152:Zbnl90ras434tT889YMsw2+V1RdEfT+Om0R2qREN:Zb30u//8mC2u3xIjQ

Score
10/10
kutaki

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
    kutaki
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94729e2f3839b40af5d038286ca722c4.bin
    .zip

    Password: infected

  • c73d7b6c2df6f9004307cf888b4c636c07dc3accb0eef34f5b0827fcc715bf42.zip
    .zip

    Password: infected

  • E-FILLING FORM B.zip
    .zip

    Password: infected

  • E-FILLING FORM B.bat
    .exe windows:4 windows x86

    Password: infected

    67a5ce7c8e5c25b362b22ebccab00cb1


    Headers

    Imports

    Sections