Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6c7aff1eab...46.exe

windows7-x64

3

6c7aff1eab...46.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfa0e8fd2a349c526938b2602947e457.bin

  • Size

    334KB

  • MD5

    742e589dd1d8bf9c439e3c1483652be3

  • SHA1

    0baa65bb62c624beaf3a9fbde5a5e3b27af78e29

  • SHA256

    8aad772bebdd8b6f415ba2e7038b43a7a536952f8ba2284e321fbda20d01f3ab

  • SHA512

    2ae6294ef9d5463def352fde87d29bbd65b4ccb7a81ee3c17dabdd99f679c52b756bb82ae6e3b43686ccd47b241121fa38ab18ba895cb4c7ef1cc3e5b35e7128

  • SSDEEP

    6144:mTWJ+6IpNUQOnxyiDcuWBXb8awV/YS0xcR/sAtmZmWfGkOC6c1HxCKWX7lfsyZBg:mCJGpcnxhPWBXbrwV/YS0+wt5X66ROV4

Score
10/10
kutaki

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
    kutaki
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dfa0e8fd2a349c526938b2602947e457.bin
    .zip

    Password: infected

  • 6c7aff1eabc1f9c02ed6ec69d3460427f05a3619a8c191de4df28a9414774946.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    8870c4972aa85b5c9f7463c18152774c


    Headers

    Imports

    Sections