kutaki | 9b0cdd613c2ac397eccc91cd8595838eee37a24d560028e6ea5f6cb21aa3cc3b | Triage

Sharing

General

Target

6479ff3881b1eec13ce0ad0b4c864580_NeikiAnalytics
Size

488KB
Sample

240512-d6pavshg66
MD5

6479ff3881b1eec13ce0ad0b4c864580
SHA1

e284fd485363fd59261c810902d7e4baa684b426
SHA256

9b0cdd613c2ac397eccc91cd8595838eee37a24d560028e6ea5f6cb21aa3cc3b
SHA512

6aaec219fccf26ffbed7d2890df9bdfef58ad4acbd010951d38cb82d0a0f1f48828d07bde4d31a566dedb0678ccf872b82c949ef5f4f0d12f3b43a86e037ea5d
SSDEEP

12288:u2V5bGhZ8IGY/Yf46A9jmP/uhu/yMS08CkntxYR:u2PGhZN/dfmP/UDMS08Ckn3

Score

10^/10

kutaki

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Targets

- Target
  
  6479ff3881b1eec13ce0ad0b4c864580_NeikiAnalytics
- Size
  
  488KB
- MD5
  
  6479ff3881b1eec13ce0ad0b4c864580
- SHA1
  
  e284fd485363fd59261c810902d7e4baa684b426
- SHA256
  
  9b0cdd613c2ac397eccc91cd8595838eee37a24d560028e6ea5f6cb21aa3cc3b
- SHA512
  
  6aaec219fccf26ffbed7d2890df9bdfef58ad4acbd010951d38cb82d0a0f1f48828d07bde4d31a566dedb0678ccf872b82c949ef5f4f0d12f3b43a86e037ea5d
- SSDEEP
  
  12288:u2V5bGhZ8IGY/Yf46A9jmP/uhu/yMS08CkntxYR:u2PGhZN/dfmP/UDMS08Ckn3
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2