kutaki | c4035416b504d5cf34bc122433144d5392120f54480db4cd68188d98e8e7d1bb | Triage

Sharing

General

Target

c4035416b504d5cf34bc122433144d5392120f54480db4cd68188d98e8e7d1bb.exe
Size

536KB
Sample

240207-rk5bvaaeer
MD5

55aa98de6c51d540397b96f9815f7505
SHA1

012bccad9c9b58904ecb2bc6bedda935c27a1df5
SHA256

c4035416b504d5cf34bc122433144d5392120f54480db4cd68188d98e8e7d1bb
SHA512

1b97dd718993a4bff76ebba5ef7a25a16417adead3747e1f51d36b3a5f4cb16888bb1e2350023468519d594b5d744c591cca7575a72a3ce261138eae0bb41854
SSDEEP

12288:McUplyaw22FrGk46A9jmP/uhu/yMS08CkntxYR:MBplyaw2VXfmP/UDMS08Ckn3

Score

10^/10

kutaki

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Targets

- Target
  
  c4035416b504d5cf34bc122433144d5392120f54480db4cd68188d98e8e7d1bb.exe
- Size
  
  536KB
- MD5
  
  55aa98de6c51d540397b96f9815f7505
- SHA1
  
  012bccad9c9b58904ecb2bc6bedda935c27a1df5
- SHA256
  
  c4035416b504d5cf34bc122433144d5392120f54480db4cd68188d98e8e7d1bb
- SHA512
  
  1b97dd718993a4bff76ebba5ef7a25a16417adead3747e1f51d36b3a5f4cb16888bb1e2350023468519d594b5d744c591cca7575a72a3ce261138eae0bb41854
- SSDEEP
  
  12288:McUplyaw22FrGk46A9jmP/uhu/yMS08CkntxYR:MBplyaw2VXfmP/UDMS08Ckn3
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2