General

  • Target

    c360385a482c6030cd6201d89f59322f06f5381a848b0ed840700bd4fa6e3d2a

  • Size

    2.3MB

  • MD5

    fc294c2db2de7c6270db5ea3f70125eb

  • SHA1

    71ebf4c50c9b253d6829ed4544a835fa50c0d83f

  • SHA256

    c360385a482c6030cd6201d89f59322f06f5381a848b0ed840700bd4fa6e3d2a

  • SHA512

    8598f744ffc0389809fef8f153fae8ec0b0dd08d9aa0f0ab5ac00d21b7e4cbbaef8d31a26225f37ab0c3a2b549cbd3e3d1f9b9b2c8dc41e67521b4945e700eb6

  • SSDEEP

    49152:RkWk5cS7a+9XYaQ+Zehc4mTYJ78V9gyBn4cX1fmP/SA8N:9ajJBZ942KQV9hp4gfmP/SA8

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c360385a482c6030cd6201d89f59322f06f5381a848b0ed840700bd4fa6e3d2a
    .exe windows:4 windows x86 arch:x86

    b56dd52955caf667160a47182a3a1d30


    Headers

    Imports

    Sections