Extracted

• • Target

    fafdd87991351ff0fa2b888a9d22fc058f1a08a6c08651d7ee0164740c70ec51.exe

  • Size

    1.4MB

  • MD5

    51813e18e119f2839f48afe00ac99ed8

  • SHA1

    7f0d60a0e87499891c5d7944ac8e8b6252ca6eb7

  • SHA256

    fafdd87991351ff0fa2b888a9d22fc058f1a08a6c08651d7ee0164740c70ec51

  • SHA512

    07ca9af7adfbfa32c3b0e095d3b306f1c44d72750efe3b347ed391895445191599166ef731f9eb2742bdf4006d4caffb3aeb18de65f65befc1c6be349a205e98

  • SSDEEP

    24576:13dhgAYmYqHU7pHYev00V6dCDdoVYdGp8VTALtMa6u:AmYqHU7pHYY00VcCDdowG3tMa6u

  Score

  10^/10

  pikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral1