General

  • Target

    dc166f70908875eeeb4fd19f22c248da486e0c4ff8fa21e455f3a653062acbc7

  • Size

    752KB

  • MD5

    8b284019623fbbb4f3c3531f51d99163

  • SHA1

    55158f83ee688ffc72c43f33fc83ec11f5c30c47

  • SHA256

    dc166f70908875eeeb4fd19f22c248da486e0c4ff8fa21e455f3a653062acbc7

  • SHA512

    535e31cee1c7e642c30e16e38331b4f638f6a7c8a4bad2258f159148c2d972d391e106f1738a14ff47e9f6a163fc8a9877d945a5e97624b55faeb1ee2626afce

  • SSDEEP

    12288:9/kA8UXFh1pHI46A9jmP/uhu/yMS08CkntxYRKA9jmP/uhu/yMS08CkntxYR:9/kAFXFlbfmP/UDMS08Ckn3gmP/UDMSz

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc166f70908875eeeb4fd19f22c248da486e0c4ff8fa21e455f3a653062acbc7
    .exe windows:4 windows x86 arch:x86

    febf33460e01b2f8cf03f5744e7fa42c


    Headers

    Imports

    Sections