General

  • Target

    6cffe7a63ec7e31aee6425c2c6ea5259f16c9e817b4bafbd3a8d8283f86d84d4.exe

  • Size

    1.8MB

  • MD5

    b53f4a29e8f17c661eff669b55504b59

  • SHA1

    d478161c439a2455370644ad9cd0bed4ed743ab5

  • SHA256

    6cffe7a63ec7e31aee6425c2c6ea5259f16c9e817b4bafbd3a8d8283f86d84d4

  • SHA512

    f7a0669a86a4f02a02b59954ea6826e0ecc36f1570e0eea0b9cb6ecd58e9f29edd2c107235353c513088cd299648bb0285d2aaf5b3171beafce9bfb084a1dea8

  • SSDEEP

    12288:0J3svJVRIliHZF/ESrnE46A9jmP/uhu/yMS08CkntxYR:ysvJvuiHZFPn3fmP/UDMS08Ckn3

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6cffe7a63ec7e31aee6425c2c6ea5259f16c9e817b4bafbd3a8d8283f86d84d4.exe
    .exe windows:4 windows x86 arch:x86

    d6d825dc5d4d07d8432f82912d47090f


    Headers

    Imports

    Sections