Overview

overview

10

Static

static

10

INF_NEFT_Debit.exe

windows7-x64

3

INF_NEFT_Debit.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    a1809e923de6cae635be84aa94afa7b7.bin
  • Size 2.1MB
  • Sample231102-c2964afd2w
  • SHA256 464f804c740b25c3bcff17535139009cd178237e638f278beb8489cad222835b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
kutaki

Malware Config

Extracted

Family

  • kutaki

C2

  • http://treysbeatend.com/laptop/squared.php

  • http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
    kutaki
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • a1809e923de6cae635be84aa94afa7b7.bin
    .zip 2.1MB
  • fffabbf5eb28e080d666156800c4d0a7ca5c986559fc5c3cc632155d12801fb4.zip
    .zip 2.1MB
  • INF_NEFT_Debit.zip
    .zip 2.1MB
  • INF_NEFT_Debit.bat
    .exe 2.3MB

a1809e923de6cae635be84aa94afa7b7.bin

  • SHA256 464f804c740b25c3bcff17535139009cd178237e638f278beb8489cad222835b
  • MD5 SHA1 SHA512 SSDEEP
Password
infected