kutaki | 10bc8552d9b63666e0788161c13213c7275fdf6a0c4d3ba3d155036be3f4222d | Triage

Sharing

General

Target

ICICIPAYMENTREFERENCE.bat.exe
Size

500KB
Sample

241104-mqlpga1phr
MD5

1c0a0f8af63ae1d01f674a15445bc38a
SHA1

4b224a051f75ea361c525f3c64d5a50be03ec0e4
SHA256

10bc8552d9b63666e0788161c13213c7275fdf6a0c4d3ba3d155036be3f4222d
SHA512

45f5b2df88ad94637552bfd2e1b152778d54bb21a3a2bf5052d688cfa74344a29c75ed1af8990620ffe752d793ac270fe449f35ea6cffa20f24195e56b962fa5
SSDEEP

12288:zPCKUFlhDzgX/m46A9jmP/uhu/yMS08CkntxYR:zPvslhDWxfmP/UDMS08Ckn3

Score

10^/10

kutaki discovery

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

Targets

- Target
  
  ICICIPAYMENTREFERENCE.bat.exe
- Size
  
  500KB
- MD5
  
  1c0a0f8af63ae1d01f674a15445bc38a
- SHA1
  
  4b224a051f75ea361c525f3c64d5a50be03ec0e4
- SHA256
  
  10bc8552d9b63666e0788161c13213c7275fdf6a0c4d3ba3d155036be3f4222d
- SHA512
  
  45f5b2df88ad94637552bfd2e1b152778d54bb21a3a2bf5052d688cfa74344a29c75ed1af8990620ffe752d793ac270fe449f35ea6cffa20f24195e56b962fa5
- SSDEEP
  
  12288:zPCKUFlhDzgX/m46A9jmP/uhu/yMS08CkntxYR:zPvslhDWxfmP/UDMS08Ckn3
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2