Resubmissions

22-01-2024 19:16

240122-xy3cascdgm 10

15-11-2023 07:49

231115-jn5ssaed96 10

13-11-2023 17:10

231113-vppczaef64 5

General

  • Target

    Punta.exe

  • Size

    1.0MB

  • Sample

    231115-jn5ssaed96

  • MD5

    f61d5fb45db0f9b6073f9e77d172bba3

  • SHA1

    74d9aa7d3a56fc20145e83d33d8ed92a127fe382

  • SHA256

    0cd962aba91336f6b82e54c35a7afa922981cfe776607cb2a2e1b072871fe2d1

  • SHA512

    a0f7183cdbca71ec035e85626a9f9d0cd278597fd6a3c7262e30eb5cf77a8a2a14ea7d105ee5f51de9aa884575d67e52ca777fe80418cf1bfba4ee2030f3b46b

  • SSDEEP

    24576:UkdMJtCwN/TZyUsxmFQHIxkxa4U6TrZV:UkkvR84FQHUEUEH

Score
10/10

Malware Config

Targets

    • Target

      Punta.exe

    • Size

      1.0MB

    • MD5

      f61d5fb45db0f9b6073f9e77d172bba3

    • SHA1

      74d9aa7d3a56fc20145e83d33d8ed92a127fe382

    • SHA256

      0cd962aba91336f6b82e54c35a7afa922981cfe776607cb2a2e1b072871fe2d1

    • SHA512

      a0f7183cdbca71ec035e85626a9f9d0cd278597fd6a3c7262e30eb5cf77a8a2a14ea7d105ee5f51de9aa884575d67e52ca777fe80418cf1bfba4ee2030f3b46b

    • SSDEEP

      24576:UkdMJtCwN/TZyUsxmFQHIxkxa4U6TrZV:UkkvR84FQHUEUEH

    Score
    10/10
    • PikaBot

      PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    • pikabot_core

      Detects pikabot core payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks