pikabot | 3bd9895780c8de069005f2b549a13f80e80ca28aa140c75c8f247ab58bc160b9

Resubmissions

22/01/2024, 19:19

11/01/2024, 22:20

Target
3bd9895780c8de069005f2b549a13f80e80ca28aa140c75c8f247ab58bc160b9
Size 307KB
Sample240111-19g3aaadf2
SHA256 3bd9895780c8de069005f2b549a13f80e80ca28aa140c75c8f247ab58bc160b9
MD5 7e0a5e8b3c87deb233fb689a22a799a2
SHA1 26612dde701e1de503275a4598de1d351a65f69c
SHA512 da7f2340f125701c37da6d47def8c31ab860a6324daa1938081e0479e98dcf9de32219889fac37ee4624bb0a7154050dcf008aabea9f10ae09c933aa7b303cad
SSDEEP 6144:+0QAJnvPktBfC4C4LzWLibEF+bsOHVeNDV:+ynoBfPzWIFsEVoDV
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

pikabot

Detects PikaBot botnet 1 IoCs

resource	yara_rule
sample	family_pikabot_v2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bd9895780c8de069005f2b549a13f80e80ca28aa140c75c8f247ab58bc160b9

IMPHASH c8033ca171bb532e5fbff452b96d4fb4
SHA256 3bd9895780c8de069005f2b549a13f80e80ca28aa140c75c8f247ab58bc160b9
MD5 7e0a5e8b3c87deb233fb689a22a799a2
SHA1 26612dde701e1de503275a4598de1d351a65f69c
SHA512 da7f2340f125701c37da6d47def8c31ab860a6324daa1938081e0479e98dcf9de32219889fac37ee4624bb0a7154050dcf008aabea9f10ae09c933aa7b303cad
SSDEEP 6144:+0QAJnvPktBfC4C4LzWLibEF+bsOHVeNDV:+ynoBfPzWIFsEVoDV
MD5 SHA1 SHA512 SSDEEP

Minor OS version

Major OS version

Entry point

210879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths