General

  • Target

    834753e33e4fcc6a591ac20fea78d498.zip

  • Size

    347KB

  • MD5

    834753e33e4fcc6a591ac20fea78d498

  • SHA1

    d57c36b7c583f1250b94a6b8920de82dbf96b82a

  • SHA256

    2be2263de3ddb86a18bc0adb5a00c85a1cea207ea41cdb770a12b29336a115ea

  • SHA512

    e8c5d65be5a6d861645e6fe53a22f7f0c8cb2ce8cdd76a1ffc7b7a6c306f737b7494fe1f1cdd04ff56811c6049ecd7b8bb9ca520f12313bb25516f38c4c16a7a

  • SSDEEP

    6144:1xTcVAq+d0lH8hx74Es+CSfwOCvzMjSa7pKu6sdl0T7u+ntD0pgfNC3gGT+S:1xTcO32OhG4fyvojJpKYazt/o3fN

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://newbosslink.xyz/baba/new4.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family

Files

  • 834753e33e4fcc6a591ac20fea78d498.zip
    .zip
  • HDFC Tax Payment Confirmation.exe
    .exe windows x86

    439780d0dfcc861d7dbb1b4ab2147bb4


    Headers

    Imports

    Sections