Overview

overview

10

Static

static

10

DOM-04-INV-1616.exe

windows7-x64

3

DOM-04-INV-1616.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DOM-04-INV-1616.bat

  • Size

    2.4MB

  • MD5

    c39e73033267ae166eaa5932507ef95b

  • SHA1

    668cb060f6cdf86175c2b8d56198b5a4b2581d18

  • SHA256

    2cb398ecd2ee5c6760a8fb2c9c70008e86ab077af14e1c417d064dc33e65ac74

  • SHA512

    b3483ea1c12380676cef1a557aa67028155844de94fc49791a81e2a288d26739f4a6f9ad48942e133f452b7e5a296ff267c931a1faef9e73c11c2e9d7b421fca

  • SSDEEP

    49152:cZehc4mTYJ78V9gyBn4cNkWk5cS7a+9XYaQyVRfmP/SA8N:cZ942KQV9hp4sajJvfmP/SA8

Score
10/10
kutaki

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
    kutaki
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DOM-04-INV-1616.bat
    .exe windows:4 windows x86 arch:x86

    c3767826150fc0472fd62bc08144a796


    Headers

    Imports

    Sections