General

  • Target

    74beaca14604870fb4ffd8b962643f05

  • Size

    458KB

  • MD5

    74beaca14604870fb4ffd8b962643f05

  • SHA1

    d9447dd00c6f35d84fd28596f201ab4ef35a53fb

  • SHA256

    c540c69985914bd3e5f0fda62e55dde2bbea52c94305f305092fda4fa954c5b3

  • SHA512

    f51c3a47cccefff55db3cdf0f29a10299170ab9af6ead89e9517b4dbb2310c6c884c6ef796a646b4523e2cc045f930d9be25ff192c3b86ad75c15d5340eab50c

  • SSDEEP

    12288:HZdjGfLP9JveGPziXlxnQDsrYcuM74FC9siEF:59GZJ2CzCnQDsrYCglF

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://newbosslink.xyz/baba/new4.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family

Files

  • 74beaca14604870fb4ffd8b962643f05
    .eml
  • HDFC Payment Receipt.zip
    .zip
  • HDFC Payment Receipt.exe
    .exe windows x86

    9c85b26cee7172133f71ba7e45cca754


    Headers

    Imports

    Sections

  • email-plain-1.txt