General

  • Target

    Receipt.zip

  • Size

    2.1MB

  • MD5

    55d4862f67fedf1b6ea943ebebb4f2e7

  • SHA1

    75726fa52440068744514027f8660fba668d1785

  • SHA256

    4efac9d701417e16e933738583b01d08690821a197dfd7d3b62dc20f91e97208

  • SHA512

    42f9eb8ca8287e5d16aca396a09d3ead9234868f908d9efdede69b1352173c6cdcc6efe8ef55719ce2edbf391b2b66666375c79ea09b95fb21dfb37934f0c8f0

  • SSDEEP

    49152:y5ANa2To/Gnahg0B3aYko0Vvy8y27M1fu/qX/mU8Vxqr:yGv/a20Fvko05yw7iu/qX/mU8yr

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family

Files

  • Receipt.zip
    .zip
  • Receipt.zip
    .zip
  • Receipt.exe
    .exe windows x86

    a18fdeadda6443382c94876132ef9ada


    Headers

    Imports

    Sections