General
- Target Invoice_384201.zipx
- Size 382KB
- Sample260720-p6tfcsay9l
- SHA256 aef7a8a43c732a8a950e4253aa662672bf06461a61de12b2813f12132cab998d
- MD5 b1effa5a8850fef067ff7630bd9b8781
- SHA1 2c235b1992daac9eddc8587964af5d1950315308
- SHA512 9e0014a01e3bb358a7ee9508a85d7fae77711a486e90e1a2d42ffb6ab49cf633593e2f60158c53c9c6525e187ae28ddb129a961a2fe9ae40ca2d8257a9f89348
- SSDEEP 6144:NQRdWbDC32XXnDvjD1wGGDA9HmHr/VCSa3hwvlMuk+uTQMYFy+lq4HTonk/urDY8:Kd8DC32HnDvjiGaA9HmL/8h6+0MYF8w8
- TLSH T19084236C1A4E4F9A6DD93CE88E63E5B343944AF72358E045CD9A72FBD069603F09610F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
kutaki
C2
-
http://treysbeatend.com/laptop/squared.php
-
http://terebinnahicc.club/sec/kool.txt
Targets
-
- Target Invoice 384201.cmd
- Size 596KB
- SHA256 f345091cf6d451a89da19c9e33c17245f067452acc5c28174eb4d68bb2aa846a
- MD5 6e014882da67e1ab4181b2d5fb8d7f26
- SHA1 d208ac602cac1ea21c9987f71d01693eb35279b8
- SHA512 2bf5204625fcef90833be1feb8000af377ffb9a5e98f5d521dd995d917d7dda8b47d119850552e8c9426265cec95080cb26004d8a364ce67f35c0d2edbf9f658
- SSDEEP 12288:IJPhMq01Ry8uze46A9jmP/uhu/yMS08CkntxYR:IJPhb01RypfmP/UDMS08Ckn3
- TLSH T1B3D48C13E560F10BE553C4B03D38925E691A2EB61290AD4BB7C2BF5A60B26D3B4F471F
- MD5 SHA1 SHA512 SSDEEP TLSH