General

  • Target

    HDFC Payment.exe

  • Size

    1.0MB

  • MD5

    c884ae57f21fbee98f3327583a408412

  • SHA1

    de718911e64d84670c48095febab54d4f130f3cf

  • SHA256

    65357d5cab8976dd6cd93dc4a6defc6ec2f03312f60036ecc963684189b93d5f

  • SHA512

    aa545b01561628aacf03b2e0e131fda681707a52ce4a2e051b0d3946bf776630bc097ffc5c957fa68077b5b445540fa8c28c4aa8f5f686f1aee8f5a6e841a668

  • SSDEEP

    24576:LtVdLmI1ppy9ABspxs140l665y38kQkILfmP/UDMS08Ckn3C:xLxM9ABspxs115fmP/SA8NS

Score
10/10

Malware Config

Extracted

Family

kutaki

C2

http://newlinkwotolove.club/love/three.php

Signatures

  • Kutaki Executable 1 IoCs
  • Kutaki family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HDFC Payment.exe
    .exe windows:4 windows x86 arch:x86

    2b85d7875d032f8a4751b38f4964cb4f


    Headers

    Imports

    Sections