feef7c585a67e368ce1a514158d6abc280e502b0408ad8b589d83687360ff11f

Submit
Reports

Overview

overview

Static

static

00ad95ca93...0e.dll

windows7-x64

00ad95ca93...0e.dll

windows10-2004-x64

05d1b79186...c3.dll

windows7-x64

05d1b79186...c3.dll

windows10-2004-x64

2411b23bab...09.dll

windows7-x64

2411b23bab...09.dll

windows10-2004-x64

31d025c022...55.dll

windows7-x64

31d025c022...55.dll

windows10-2004-x64

3b0dce669a...1d.dll

windows7-x64

3b0dce669a...1d.dll

windows10-2004-x64

3ba484fd94...b7.dll

windows7-x64

3ba484fd94...b7.dll

windows10-2004-x64

443c727f45...fd.dll

windows7-x64

443c727f45...fd.dll

windows10-2004-x64

4bc3d95ee8...a2.dll

windows7-x64

4bc3d95ee8...a2.dll

windows10-2004-x64

4d81b964b8...53.dll

windows7-x64

4d81b964b8...53.dll

windows10-2004-x64

4fb5b0da3a...45.dll

windows7-x64

4fb5b0da3a...45.dll

windows10-2004-x64

50d0a3b32e...88.dll

windows7-x64

50d0a3b32e...88.dll

windows10-2004-x64

59f42ecde1...d1.dll

windows7-x64

59f42ecde1...d1.dll

windows10-2004-x64

5a76edd4bf...87.dll

windows7-x64

5a76edd4bf...87.dll

windows10-2004-x64

610e854b8c...19.dll

windows7-x64

610e854b8c...19.dll

windows10-2004-x64

644a054d1f...bc.dll

windows7-x64

644a054d1f...bc.dll

windows10-2004-x64

802a953fdb...1f.dll

windows7-x64

802a953fdb...1f.dll

windows10-2004-x64

Analysis

max time kernel
30s
max time network
33s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
29-06-2023 22:03

Sharing

Copy URL

Twitter E-mail

Static task

static1

pikabot

3 signatures

Behavioral task

behavioral1

Sample

00ad95ca939f4fbb3452ea300bb919ef18cbde843604d7148fa165b645c3030e.dll

Resource

win7-20230621-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

00ad95ca939f4fbb3452ea300bb919ef18cbde843604d7148fa165b645c3030e.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

05d1b791865c9551ed8da6a170eb6f945a4d1e79cb70341f589cc47bacf78cc3.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

05d1b791865c9551ed8da6a170eb6f945a4d1e79cb70341f589cc47bacf78cc3.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

2411b23bab7703e94897573f3758e1849fdc6f407ea1d1e5da20a4e07ecf3c09.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

2411b23bab7703e94897573f3758e1849fdc6f407ea1d1e5da20a4e07ecf3c09.dll

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

31d025c022dfa29f0d953d477a5cefebe91bf28e60fa771b407cc0b25dd65355.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

31d025c022dfa29f0d953d477a5cefebe91bf28e60fa771b407cc0b25dd65355.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

3b0dce669a07626746d3b2301607702abd3bb2cba8dcb9c8b655f246e7b8ab1d.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

3b0dce669a07626746d3b2301607702abd3bb2cba8dcb9c8b655f246e7b8ab1d.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

3ba484fd9430dda5ea691c86ed0cd6e95f1e401d7b444c0d6465545a03ae20b7.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

3ba484fd9430dda5ea691c86ed0cd6e95f1e401d7b444c0d6465545a03ae20b7.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

443c727f45873a83f2b236cafa7781439e0ce9a25120d01621a812af15934ffd.dll

Resource

win7-20230621-en

evasion

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

443c727f45873a83f2b236cafa7781439e0ce9a25120d01621a812af15934ffd.dll

Resource

win10v2004-20230621-en

evasion

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

4bc3d95ee8661f7d381b2ceb6cb4a6e9759d7d0f9d883b44528b0f9c0aa559a2.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

4bc3d95ee8661f7d381b2ceb6cb4a6e9759d7d0f9d883b44528b0f9c0aa559a2.dll

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

4d81b964b809d1d3c642d331f17f80ee013fdd2b8bd2cffd191449313ea92353.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

4d81b964b809d1d3c642d331f17f80ee013fdd2b8bd2cffd191449313ea92353.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

4fb5b0da3a557a7dac922010a2b888a91055c4381cf494a6336a674be3bb4a45.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

4fb5b0da3a557a7dac922010a2b888a91055c4381cf494a6336a674be3bb4a45.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

50d0a3b32e813c671248f0f2fe10c3c237ee94bfa94fcaf86886fc3a64d79b88.dll

Resource

win7-20230621-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

50d0a3b32e813c671248f0f2fe10c3c237ee94bfa94fcaf86886fc3a64d79b88.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

59f42ecde152f78731e54ea27e761bba748c9309a6ad1c2fd17f0e8b90f8aed1.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

59f42ecde152f78731e54ea27e761bba748c9309a6ad1c2fd17f0e8b90f8aed1.dll

Resource

win10v2004-20230621-en

pikabot botnet evasion

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral25

Sample

5a76edd4bf074cc6a66199f87896dee330a81164d112605681ccb145d64cd587.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

5a76edd4bf074cc6a66199f87896dee330a81164d112605681ccb145d64cd587.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

610e854b8c98ab9fd11985f3468eababee930d0bc695cc596f7a2b0e92b25f19.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

610e854b8c98ab9fd11985f3468eababee930d0bc695cc596f7a2b0e92b25f19.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

644a054d1f42e129007fbe1ed445e1f36cc84737727e1d842530e16aec7c37bc.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

644a054d1f42e129007fbe1ed445e1f36cc84737727e1d842530e16aec7c37bc.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

802a953fdb8efac8ec2a48bb8051713eb23edf962a10640d144206fea99b001f.dll

Resource

win7-20230621-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

802a953fdb8efac8ec2a48bb8051713eb23edf962a10640d144206fea99b001f.dll

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

4bc3d95ee8661f7d381b2ceb6cb4a6e9759d7d0f9d883b44528b0f9c0aa559a2.dll
Size

726KB
MD5

09dd5cbeaaad7dbbb55247f88d8f47ff
SHA1

fefb2c4364209dd3570d567cc65748000045d889
SHA256

4bc3d95ee8661f7d381b2ceb6cb4a6e9759d7d0f9d883b44528b0f9c0aa559a2
SHA512

367481d9a0b3da881019f527117822532b97cddf648db4962bbd363e77d895a960d09c3da94cb115583b273c2bc812b5db196232c183d11e454edd466fe470cd
SSDEEP

12288:YGKKDADhi+Da3rIByJ13pRxd1sPHyrrKHS1sPHyrW:YGKKDADh7DKrIBg1ZRxd1EHyrrKHS1EV

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1300 wrote to memory of 2012	1300	rundll32.exe	rundll32.exe
PID 1300 wrote to memory of 2012	1300	rundll32.exe	rundll32.exe
PID 1300 wrote to memory of 2012	1300	rundll32.exe	rundll32.exe
PID 1300 wrote to memory of 2012	1300	rundll32.exe	rundll32.exe
PID 1300 wrote to memory of 2012	1300	rundll32.exe	rundll32.exe
PID 1300 wrote to memory of 2012	1300	rundll32.exe	rundll32.exe
PID 1300 wrote to memory of 2012	1300	rundll32.exe	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4bc3d95ee8661f7d381b2ceb6cb4a6e9759d7d0f9d883b44528b0f9c0aa559a2.dll, DllUnregisterServer
1⤵
- Suspicious use of WriteProcessMemory
PID:1300

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4bc3d95ee8661f7d381b2ceb6cb4a6e9759d7d0f9d883b44528b0f9c0aa559a2.dll, DllUnregisterServer
2⤵
PID:2012

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads