Overview

overview

10

Static

static

10

c4035416b5...bb.exe

windows7-x64

3

c4035416b5...bb.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    891d66de936462bb812e8786c9f54d91c057c5e100f1ab7e68c42c0a61f8146f

  • Size

    353KB

  • MD5

    4bc8b69681ef19a4051da2f1b0971bc9

  • SHA1

    bd07ef4e1591d94292dad4942d11d8823a7559bc

  • SHA256

    891d66de936462bb812e8786c9f54d91c057c5e100f1ab7e68c42c0a61f8146f

  • SHA512

    03093bd809b7bdbb913c0c0d84c3f70559d692f16a1d688fbfd60fc83158215bd723f1d496a8b8ce7ac514e8af80244f7944e36d7855a231e7c460ae8151d96e

  • SSDEEP

    6144:XUyPBtQjeGY+2a52BMJ1i60YkXntehz4ffZGSNr4BuFR0AZGcEDljzQRDC/4:XUXeGY+2a5mMJ1i60Y14ZZr2MZGDx54

Score
10/10
kutaki

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
    kutaki
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 891d66de936462bb812e8786c9f54d91c057c5e100f1ab7e68c42c0a61f8146f
    .zip

    Password: infected

  • c4035416b504d5cf34bc122433144d5392120f54480db4cd68188d98e8e7d1bb.exe
    .exe windows:4 windows x86 arch:x86

    70e6405c911e37e751e66490fe6b9801


    Headers

    Imports

    Sections