General

  • Target

    800999621ec6036d4ca4070733a1a76a.zip

  • Size

    336KB

  • MD5

    800999621ec6036d4ca4070733a1a76a

  • SHA1

    53ee4f63acd929f3a74f91367535015643f2fab9

  • SHA256

    4e95c654625af3c239740b6d8f1799d5ad938bcb9404d2935c5240c22985d76b

  • SHA512

    3e6509d958f07bf925655996674441c33deb9b92c367b9fbd33f8e942a2b674104eacb8f4ce9df5e34c8cafa83e9366d65ef73021a15a4c8f291e6e71f207a58

  • SSDEEP

    6144:AtqN2xpd9yDiR2Z1+4GpA9jQHL/VCSS3hwVlMbk2u5QMSIy+lqkHTonerW/lYRN:Atjpd9h2y48A9jQr/Uh8peMSI8EknPd8

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://linkwotowoto.club/new/two.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 800999621ec6036d4ca4070733a1a76a.zip
    .zip
  • Payment Channel.exe
    .exe windows:4 windows x86

    3910e25da1d2ff6583dec41939e4bd20


    Headers

    Imports

    Sections