General

  • Target

    d1434a4d08341f78a58b3dbf922831cc4dc1cff634acd7385ed81bba15d848df.exe

  • Size

    536KB

  • MD5

    9845b8d011afd9d1b2557e3f93c2e031

  • SHA1

    c0ac7f5b94a90437f846a1075aab8b6de5e4aca9

  • SHA256

    d1434a4d08341f78a58b3dbf922831cc4dc1cff634acd7385ed81bba15d848df

  • SHA512

    4d83b5ee7d4e2d08b6041f14bd532c39191913d4d9c8e0e488ffaf9ec8d2acd8ccf4fde19a6a110f8b9aa645ce8d96d0e8debb849df4cc36fce2fae04968d116

  • SSDEEP

    12288:KcUplyaw22FrGA46A9jmP/uhu/yMS08CkntxYR:KBplyaw2VzfmP/UDMS08Ckn3

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d1434a4d08341f78a58b3dbf922831cc4dc1cff634acd7385ed81bba15d848df.exe
    .exe windows:4 windows x86 arch:x86

    70e6405c911e37e751e66490fe6b9801


    Headers

    Imports

    Sections