General

  • Target

    be1e117af754d19e5ee30b440d9035ec_JaffaCakes118

  • Size

    1000KB

  • MD5

    be1e117af754d19e5ee30b440d9035ec

  • SHA1

    fba8c8bdc482955012103c604b7614f788fb523b

  • SHA256

    26dd613fb23b6d3a074f487d7566061be28fb4a177d316f950b282e8c3676d9a

  • SHA512

    18ed6b241bf5589fcb9554db7b12585285856243f2e4bba13e502607bdd1f8ad6fc8a4bdd866d755db76dfd23a9459ca69a419ce922081d22b49d75c8a50c05d

  • SSDEEP

    12288:BIu9pb7QlUDrNMc3946A9jmP/uhu/yMS08CkntxYR0:auDbaurNt2fmP/UDMS08Ckn3J

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://sdaskmda.club/papa/love.php

http://terebinnahi.club/sec/kool.txt

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be1e117af754d19e5ee30b440d9035ec_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    4db5ed98323fd1367827e824593faf95


    Headers

    Imports

    Sections