General

  • Target

    97a4007da195e9a00bd0e105813f1564.zip

  • Size

    336KB

  • MD5

    97a4007da195e9a00bd0e105813f1564

  • SHA1

    1c5c17b72f8aa10a3597b2259db86ae8a1506d98

  • SHA256

    fd521a6a9e13b00329723103b9039e23950450f901da8f61cea3b92ff96dceee

  • SHA512

    7bb3905372fd5d7c76ab43460b1f68b029f793227f92bb5e1a09888c45a16cb30f280a5bb59b20a31d12711481e93f86c7b51bc20a3adbed6b72a18c4acd25bf

  • SSDEEP

    6144:ATRHhN+dhgsBVOJXd1+4GpA9jQHL/VCSS3hwVlMbk2u5QMSIy+lqkHTonerW/lY0:A9KDBSXG48A9jQr/Uh8peMSI8EknPdY0

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://linkwotowoto.club/new/two.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 97a4007da195e9a00bd0e105813f1564.zip
    .zip
  • Challan.exe
    .exe windows:4 windows x86

    3910e25da1d2ff6583dec41939e4bd20


    Headers

    Imports

    Sections