Overview

overview

10

Static

static

10

INF_NEFT_Debit.exe

windows7-x64

3

INF_NEFT_Debit.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1809e923de6cae635be84aa94afa7b7.bin

  • Size

    2.1MB

  • MD5

    55a30bb63467702eb7a148adf37d2847

  • SHA1

    88bbd1a61851c5cfb9fd77a15c0e051a8e948205

  • SHA256

    464f804c740b25c3bcff17535139009cd178237e638f278beb8489cad222835b

  • SHA512

    564bb30aa9f6550a0691dd37b520c42743536c15597a2767fbd2a09f5e055a69f59cd7060d378f2ea0bbeac30d02e652eb7132e11c3c355ef7be6eca468ba36f

  • SSDEEP

    49152:p7PsrFyKHvZHiC2bWRVx8jFrGyjrV6wCxaYZ+oikQEi0yyp4gLASsqH6Bt:p7PEyKPZHgM7W7TCxBlQD7gUSsZBt

Score
10/10
kutaki

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
    kutaki
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1809e923de6cae635be84aa94afa7b7.bin
    .zip

    Password: infected

  • fffabbf5eb28e080d666156800c4d0a7ca5c986559fc5c3cc632155d12801fb4.zip
    .zip

    Password: infected

  • INF_NEFT_Debit.zip
    .zip

    Password: infected

  • INF_NEFT_Debit.bat
    .exe windows:4 windows x86

    Password: infected

    561c18361eb724808a2d9ecd5f5cc217


    Headers

    Imports

    Sections