General

  • Target

    Payment Note.bat.exe

  • Size

    500KB

  • MD5

    dfa0e8fd2a349c526938b2602947e457

  • SHA1

    4cdc4939fc3feb328a5ad54d4d917e35ccdc9cdf

  • SHA256

    6c7aff1eabc1f9c02ed6ec69d3460427f05a3619a8c191de4df28a9414774946

  • SHA512

    1e09be5b5375246c91004d80fc6bce7ee66256208ccaca3a7776a43a9fa84de644624aebeddc020a43b67846e615d279c9d7e36d06601c1d915d9ea32f5dcf73

  • SSDEEP

    12288:4+Oa75wxpzAZu9r46A9jmP/uhu/yMS08CkntxYR:FR75t1fmP/UDMS08Ckn3

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

http://terebinnahicc.club/sec/kool.txt

Signatures

  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Payment Note.bat.exe
    .exe windows:4 windows x86 arch:x86

    8870c4972aa85b5c9f7463c18152774c


    Headers

    Imports

    Sections