General

  • Target

    682572888b60da06809d5f5dbce53b9a1bfede2d7a2deae9039e3020d68b1a73

  • Size

    465KB

  • MD5

    ae6e96376af9418752b9c2c9e9e1debf

  • SHA1

    bbb067145926697c07e80a0308106112b1189039

  • SHA256

    682572888b60da06809d5f5dbce53b9a1bfede2d7a2deae9039e3020d68b1a73

  • SHA512

    4164d0c607636d6ba462d9556c7841cb77131e693c6a0af15cb062222052e099bfcc44f941f9fd5f1e19f585ca9b85d2e4f25b994f2b1415deb48782d64971b7

  • SSDEEP

    12288:IVl4yCL6f6f0xB81IWa46A9jmP/uhu/yMS08CkntxYRYL:a7k3fmP/UDMS08Ckn3X

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://newlinkwotolove.club/love/three.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 682572888b60da06809d5f5dbce53b9a1bfede2d7a2deae9039e3020d68b1a73
    .exe windows:4 windows x86 arch:x86

    f849688f2eaeedf623c61aebff529a1a


    Headers

    Imports

    Sections