kutaki | e4ee710015c9aaa644b2b2c051bde67aee882ee368b6e9239e38439b37d6c71e | Triage

Sharing

General

Target

ICICIPAYMENTREFERENCE.zip
Size

329KB
Sample

241104-msqq7szalm
MD5

52b971b64478918b9522efa36f10b177
SHA1

3eaca63058fbb1692d2aedb2dd3bee4e87e2c215
SHA256

e4ee710015c9aaa644b2b2c051bde67aee882ee368b6e9239e38439b37d6c71e
SHA512

844ab7d1971de6bd663d20e4269189d118a7acf74725c8c03f4b52165d7b80feed89adb821dcc8c46ef05a39d3f5c4c1330bce3db595b5624e239d11b20bd551
SSDEEP

6144:/Calxz7XXU1grkwdXA9jV/VCSPutflMxytyhufy+lqSzTrfHnVnTNPT8I9:aaDrGwdXA9jV/UYytHf8STV9j9

Score

10^/10

kutaki discovery

Malware Config

Extracted

Family

kutaki

C2

http://treysbeatend.com/laptop/squared.php

Targets

- Target
  
  ICICI PAYMENT REFERENCE.bat
- Size
  
  500KB
- MD5
  
  1c0a0f8af63ae1d01f674a15445bc38a
- SHA1
  
  4b224a051f75ea361c525f3c64d5a50be03ec0e4
- SHA256
  
  10bc8552d9b63666e0788161c13213c7275fdf6a0c4d3ba3d155036be3f4222d
- SHA512
  
  45f5b2df88ad94637552bfd2e1b152778d54bb21a3a2bf5052d688cfa74344a29c75ed1af8990620ffe752d793ac270fe449f35ea6cffa20f24195e56b962fa5
- SSDEEP
  
  12288:zPCKUFlhDzgX/m46A9jmP/uhu/yMS08CkntxYR:zPvslhDWxfmP/UDMS08Ckn3
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2