General

  • Target

    Payment_Receipt.zip

  • Size

    422KB

  • MD5

    c673b09e0527528bbd30c5d03b7af463

  • SHA1

    48e5b652d16a4eddb07ae119638a504ba477a486

  • SHA256

    03e067b68230dd9da8e74c905e862dd1f7c094a35606405d4e426f8ba02981bc

  • SHA512

    2b64a045aa3812515c183b07b8b7f171bdde94e79e9cc13cccce0713c836edd8ebef958ed232ddb6d191fa022115df2eb8790b2ff9bc6cc928c5deddcb3b2701

  • SSDEEP

    12288:pokf0ngJ6K36HBx04cA9jmd/uhoVyM+08CknJTYR8:pSK6o6HBtJmd/UZM+08CknpJ

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://newloshree.xyz/work/son.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Payment_Receipt.zip
    .zip
  • Payment_Receipt.exe
    .exe windows x86

    92ea9227782f0ce87ec7d6acf15fa241


    Headers

    Imports

    Sections