Overview

overview

10

Static

static

3

Punta.exe

windows7-x64

1

Punta.exe

windows10-2004-x64

10

Resubmissions

22-01-2024 19:16

240122-xy3cascdgm 10

15-11-2023 07:49

231115-jn5ssaed96 10

13-11-2023 17:10

231113-vppczaef64 5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Punta.exe

  • Size

    1.0MB

  • Sample

    240122-xy3cascdgm

  • MD5

    f61d5fb45db0f9b6073f9e77d172bba3

  • SHA1

    74d9aa7d3a56fc20145e83d33d8ed92a127fe382

  • SHA256

    0cd962aba91336f6b82e54c35a7afa922981cfe776607cb2a2e1b072871fe2d1

  • SHA512

    a0f7183cdbca71ec035e85626a9f9d0cd278597fd6a3c7262e30eb5cf77a8a2a14ea7d105ee5f51de9aa884575d67e52ca777fe80418cf1bfba4ee2030f3b46b

  • SSDEEP

    24576:UkdMJtCwN/TZyUsxmFQHIxkxa4U6TrZV:UkkvR84FQHUEUEH

Score
10/10
pikabotbotnet

Malware Config

Targets

    • Target

      Punta.exe

    • Size

      1.0MB

    • MD5

      f61d5fb45db0f9b6073f9e77d172bba3

    • SHA1

      74d9aa7d3a56fc20145e83d33d8ed92a127fe382

    • SHA256

      0cd962aba91336f6b82e54c35a7afa922981cfe776607cb2a2e1b072871fe2d1

    • SHA512

      a0f7183cdbca71ec035e85626a9f9d0cd278597fd6a3c7262e30eb5cf77a8a2a14ea7d105ee5f51de9aa884575d67e52ca777fe80418cf1bfba4ee2030f3b46b

    • SSDEEP

      24576:UkdMJtCwN/TZyUsxmFQHIxkxa4U6TrZV:UkkvR84FQHUEUEH

    Score
    10/10
    pikabotbotnet

    • Detects PikaBot botnet

    • PikaBot

      PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

      botnetpikabot

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks