General

  • Target

    Payment_Copy.zip

  • Size

    2.1MB

  • MD5

    5d686d1aa4048911d04e368c30a43c0d

  • SHA1

    b7240ee3eba17d7575dfe2b9721c55ec2484ac38

  • SHA256

    24171c6024628fe1d18a50883ebc19dd86c42eb45aca2b402bd91dc5802c29e9

  • SHA512

    a5db7387318cdddbf583a68ec0ef493e7e19f187f4446a6b5fecd124577b219f2c07f61d6f06f6838647581d843e1ae2755cae05dcd320b390cbf768a5ce0eeb

  • SSDEEP

    49152:DiLTPeVjFOwHxP1PC/jbtO0oMguZgTY4rRKXNZ4lmt/aY8h5:DiHgxxo/ftoMg+gcKKXNZ4lmt/aY8L

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

Files

  • Payment_Copy.zip
    .zip
  • Payment_Copy.zip
    .zip
  • Payment_Copy.exe
    .exe windows x86

    d24edab77279df23707d626d3ad31888


    Headers

    Imports

    Sections