Overview

overview

10

Static

static

10

Receipt.exe

windows7-x64

10

Receipt.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Receipt.exe
  • Size 557KB
  • Sample221121-mchqnaee79
  • SHA256 42c326b155960ea90143b31d14c48bf081d6dc6bb74ce383cace3cdfe844a403
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
kutaki

Malware Config

Extracted

Family

  • kutaki

C2

  • http://newbosslink.xyz/baba/new4.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family
    kutaki

File Explorer

  • Receipt.exe
    .exe 557KB

Receipt.exe

  • IMPHASH 5e028c949dcc1951092759fc4ad31b69
  • SHA256 42c326b155960ea90143b31d14c48bf081d6dc6bb74ce383cace3cdfe844a403
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • Kutaki Executable

Minor OS version
Major OS version
Entry point
4720
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths