Overview

overview

10

Static

static

10

Payment_Advice.exe

windows10-1703-x64

3

Payment_Advice.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    231109-qaa5kshd9x_pw_infected.zip

  • Size

    2.1MB

  • MD5

    6b3b5d02e59bfb7d06923c755eb97c3f

  • SHA1

    94b1e6b066e277b5296a49ebd63b1c021e1f0882

  • SHA256

    1f97895f155ba863e1c57562cdb17b79b3c1db3d1e210649827fea8d8147a0ce

  • SHA512

    12633b09eac755987e3bd967a33d134466003c01ebf755c806223805fe0ade698bab5d4551ac5914b18f27c6cf38c781f58ed1e20bdcf2e48a3259584bf32db1

  • SSDEEP

    49152:r7RkMB8XpdtvzbbZBSqY4/9aetG0lKu0ADLTuVd3Wv+AZwTJFkWOAnSNanRk+vk:aMkPtvvbFrYaG0lKu0YMdu+WGJFkWy8e

Score
10/10
kutaki

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
    kutaki
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 231109-qaa5kshd9x_pw_infected.zip
    .zip

    Password: infected

  • Payment_Advice.zip
    .zip

    Password: infected

  • Payment_Advice.cmd
    .exe windows:4 windows x86

    Password: infected

    71d1d5bcde51f744bf97b431d90e3bd7


    Headers

    Imports

    Sections