General

  • Target

    541ce09cec54e8df1f14a5e25064929e3f3c151f0d68dd6968d229668443444b

  • Size

    754KB

  • MD5

    cc3dea0182a77c7ca10925e2c180bc62

  • SHA1

    537cd49fa4abf265b69d9d0de982373544c643fc

  • SHA256

    541ce09cec54e8df1f14a5e25064929e3f3c151f0d68dd6968d229668443444b

  • SHA512

    99655f1a80a9aacb5f77917700f4303a53368e62d7807196b6e5fa917a40382523ea9ab42a81ba66d7c2bab12ff291bd2efc0399922ae578f8332e982fda40e0

  • SSDEEP

    12288:K39b2oWvRykNICNEZjwJxtk46A9jmP/uhu/yMS08CkntxYRcBAL:KeNIuEZjqxVfmP/UDMS08Ckn3A

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://newlinkwotolove.club/love/three.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 541ce09cec54e8df1f14a5e25064929e3f3c151f0d68dd6968d229668443444b
    .exe windows:4 windows x86 arch:x86

    55a8f44deac29a6958dcdca0964a7a15


    Headers

    Imports

    Sections