General

  • Target

    Invoice No 3031.zip

  • Size

    610KB

  • MD5

    a2085e75897e90b690272839e0780a2d

  • SHA1

    f70f7dc4f0c41b30845a259eeeb88dc5a885566c

  • SHA256

    7be7c55b508491fc120da9f6e3390bd35f97c234088a1d512bc0209fe700cff2

  • SHA512

    7ba742697f1696a88d27e5870a0821817b35c5d35f2c4ae44d543753f07b51ae99673e39a60e901adb274ddcc7af119c60277f0676914d11c6c40cb3fd0c40e9

  • SSDEEP

    12288:3n04QA9/mR/U7uLgkS0sCkt/FYRWXgIG9ABWt6EKegZfi9oAr:3tmR/+DkS0sCktN2feBpEKeSi1r

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

Files

  • Invoice No 3031.zip
    .zip

    Password: infected

  • Invoice No 3031.cmd
    .exe windows x86

    Password: infected

    e715f3c5058fd2de28211e01a1b3ec74


    Headers

    Imports

    Sections

  • Invoice No 3031.zip
    .zip

    Password: infected

  • Invoice No 3031.cmd
    .exe windows x86

    Password: infected

    e715f3c5058fd2de28211e01a1b3ec74


    Headers

    Imports

    Sections