General

  • Target

    36b7f4a622103d25a516973e8db7c4b1334465a9eb1ce4ba0ba08b05f6fcd229.exe

  • Size

    500KB

  • MD5

    6891bb0f887e42607ed8a657294f9ac5

  • SHA1

    ee3f543d006363ba1c5d0415dbdff5073360be26

  • SHA256

    36b7f4a622103d25a516973e8db7c4b1334465a9eb1ce4ba0ba08b05f6fcd229

  • SHA512

    aef0bcbd0ed829fed7d19dfacc314984ddb8ecde8e6d04b55838d8e5912e4322e23b389f2e01749c19f1e4e55f0ff63299df5988f662c15413814b98f206ee36

  • SSDEEP

    12288:d+Oa75wxpzAZu9/46A9jmP/uhu/yMS08CkntxYR:IR75tpfmP/UDMS08Ckn3

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 36b7f4a622103d25a516973e8db7c4b1334465a9eb1ce4ba0ba08b05f6fcd229.exe
    .exe windows:4 windows x86 arch:x86

    8870c4972aa85b5c9f7463c18152774c


    Headers

    Imports

    Sections