Extracted

• • Target

    ffc39c3fdbe06c62d04f4853fd2f0dda2e745a2886776b2ee39418c53d764441.dll

  • Size

    193KB

  • MD5

    f5cea7d74d36624df4e136c6c74b30f0

  • SHA1

    892f2bd2f7582a6a8a98bc5e8c3876f6ec7a5af0

  • SHA256

    ffc39c3fdbe06c62d04f4853fd2f0dda2e745a2886776b2ee39418c53d764441

  • SHA512

    b2f3be9f408057d10372f66ed81f69d75eb3ea8d4f321108e5faf7ad1ade3092f50d9c0719a410c744f60fa9481cad6285a581740cda48029389ca1d7ba4d460

  • SSDEEP

    3072:fhVQkLSPB5/bhWll55++X1qxSKctXzFNI516skIprTf1vngLK/74:fhNLOBNcrPzqxfcrWrPkIpr/74

  Score

  10^/10

  pikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral1