Resubmissions

17/09/2022, 21:15

220917-z36avsace410

12/09/2022, 07:51

220912-jptrxacge810

General

  • Target
    Payment Confirmation Invoice.exe
  • Size 408KB
  • Sample220912-jptrxacge8
  • SHA256 29b194f5409b24a2bdf4b74f35e13a73e7e133dab36339f7b2cc9a0e4f007e17
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • kutaki

C2
  • http://newbosslink.xyz/baba/new4.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family

File Explorer

  • Payment Confirmation Invoice.exe
    .exe 408KB

Payment Confirmation Invoice.exe

  • IMPHASH 5cb087ed93d189235a6531d416a88c86
  • SHA256 29b194f5409b24a2bdf4b74f35e13a73e7e133dab36339f7b2cc9a0e4f007e17
  • MD5 SHA1 SHA512 SSDEEP
  • Kutaki Executable

Minor OS version
Major OS version
Entry point
4684
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths