General

  • Target

    RENEWAL.zip

  • Size

    364KB

  • MD5

    cdb85d64a6df5f48477931ec3c2df14e

  • SHA1

    72212e655058222424b98960edc45d349568ce33

  • SHA256

    e101746b116f24163e6f8c4b280eb3c424c6ac913a93b91f1afefda941f78644

  • SHA512

    6d6fe8b855eaf6c3ea9e4f5c5bd5fe9452d138a786e4d75ca8ba354e36f7d4a4989c5667e538185fd80ee6be469970fde14f7fe3f44efadad6db8ea47c7be8c9

  • SSDEEP

    6144:Z+9PPhifSEYZ3/qj+cRGkB1M4GBA9juHF/VCSY3hw5lM3kiuzQMSiy+lqUHTonwz:Z+ufKeQko40A9jul/qhwdUMSi8Ukn7ni

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RENEWAL.zip
    .zip
  • RENEWAL.zip
    .zip
  • RENEWAL.cmd
    .exe windows:4 windows x86 arch:x86

    60004cc8dab1fae596ae3c9e815084a9


    Headers

    Imports

    Sections