General

  • Target

    CREDDIT.zip

  • Size

    508KB

  • MD5

    89e501b000a3b89e7cfdebc994825d11

  • SHA1

    021d0a57ae448e227848120799bb7b18f498623d

  • SHA256

    6ddce243cb75890ad12f49aea852567b778d4f6708d2446b16cbc8c2e41dcfac

  • SHA512

    cedb36fe7029904fb38d29505cfcc7317a08c149dee4abebad5d955f9494306a92134a98aa942099920ca45483e5eb22bd5d373574430e4efe695417336f201e

  • SSDEEP

    12288:5xBtzaS3WddhMA54HJ48A9lmb/wLu5IYS0GCkHZBYRL:5x65dRmCHmb/eBYS0GCkHTY

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CREDDIT.zip
    .zip
  • CREDIT.zip
    .zip
  • CREDIT.cmd
    .exe windows x86

    45e2345d160929b79e76a3d9d5e968dd


    Headers

    Imports

    Sections