General

  • Target

    INV_273648.zipx

  • Size

    325KB

  • MD5

    70eae025a730e6202e917e78891ccb21

  • SHA1

    0fdb297c225e7595ca44e7ee9e5efbced8f6bb42

  • SHA256

    c1a415e4a6d9fbe0afbe36df5287ace5de51227badd6db5c74ca250369e65bf6

  • SHA512

    cafe8e6d0516c49e725b754c68f5bd064813d44a4216894530e388b075db3c3e7513bfca7e3df73058526895f58d92cd64e76e1dc8b1e398d7ec397e663485e2

  • SSDEEP

    6144:qraZjXIdgC042hA9tmHV/VtWY3hA9lCbUuurQYS0y+lAoHTonIRyrDYRX:qraZjez04YA9tm1/Nh+ncYS0OAknvfYJ

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • INV_273648.zipx
    .zip
  • image.zip
    .zip
  • image.bat
    .exe windows:4 windows x86 arch:x86

    9ef30cfcf3d9f59e6d64ea7869dc6318


    Headers

    Imports

    Sections