Overview

overview

10

Static

static

10

ITR-5.exe

windows7-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ITR-5.bat

  • Size

    564KB

  • MD5

    4437635f9e8a4987d4196cd1eb20e4d2

  • SHA1

    939ffe6a6316ac3a4f863ec286ba3803b67ea606

  • SHA256

    4f25cafcbf73252552d651e7af8dfa423921350c2f937f24db786cff280fbd6a

  • SHA512

    16511508332a40c9defa0363d417003a1f7d0b1a0c868a1455e2a7848cc84f7bb40d1a4e6a92a0fb431fc492cb9c5989768aa35f4e240273b1ebc66f2db506ce

  • SSDEEP

    6144:VS2DzbwJSU/tcc1S4GlA9jmHv/VCSY3hw9lMbk6u1QMS0y+lqiHTonWryFDYR:3bwJSr46A9jmP/uhu/yMS08CkntxYR

Score
10/10
kutaki

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
    kutaki
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ITR-5.bat
    .exe windows:4 windows x86 arch:x86

    24e6520d69fe88180af289258eac69b7


    Headers

    Imports

    Sections