General

  • Target

    6479ff3881b1eec13ce0ad0b4c864580_NeikiAnalytics

  • Size

    488KB

  • MD5

    6479ff3881b1eec13ce0ad0b4c864580

  • SHA1

    e284fd485363fd59261c810902d7e4baa684b426

  • SHA256

    9b0cdd613c2ac397eccc91cd8595838eee37a24d560028e6ea5f6cb21aa3cc3b

  • SHA512

    6aaec219fccf26ffbed7d2890df9bdfef58ad4acbd010951d38cb82d0a0f1f48828d07bde4d31a566dedb0678ccf872b82c949ef5f4f0d12f3b43a86e037ea5d

  • SSDEEP

    12288:u2V5bGhZ8IGY/Yf46A9jmP/uhu/yMS08CkntxYR:u2PGhZN/dfmP/UDMS08Ckn3

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6479ff3881b1eec13ce0ad0b4c864580_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86

    403bea4f70ab2e24d5f6b70b592e767a


    Headers

    Imports

    Sections