Resubmissions

09-11-2023 13:08

231109-qdqdnshe3t 10

09-11-2023 13:02

231109-qaa5kshd9x 10

General

  • Target

    Payment_Advice.zip

  • Size

    2.1MB

  • MD5

    fa84055db973d2153f9707c0cd0a8992

  • SHA1

    a14ac589fe81cf69cb1a1529126c2e395b159a90

  • SHA256

    82103d7627dcdbe4490a6327d2b8fd32ea62d8257d7256e418b6cbfce7cab160

  • SHA512

    89b44636dd081fc292077d238df88bf1fa9db48cce46dbce0a73b4227fea980679c6b605d9d1e4cdb7369dadcf90484ae93978f671a1dfb6cd4c9ea8af9253dc

  • SSDEEP

    49152:r4qhvL6OkL15mZOBHeKH4A2laxOPl3DjACd0/z3On0+rLdmf/ks8Fh:ThvVkLsY4lTjA7/z3oX3dmf/ks8v

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Payment_Advice.zip
    .zip
  • Payment_Advice.cmd
    .exe windows:4 windows x86

    71d1d5bcde51f744bf97b431d90e3bd7


    Headers

    Imports

    Sections