Overview

overview

10

Static

static

3

ffc39c3fdb...41.dll

windows10-2004-x64

10

Resubmissions

22-02-2024 19:45

240222-ygg6gaed2x 10

16-02-2024 04:40

240216-fav5msac85 5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5cea7d74d36624df4e136c6c74b30f0.bin

  • Size

    123KB

  • Sample

    240222-ygg6gaed2x

  • MD5

    6943758eacd07ab416a9e8362c377330

  • SHA1

    7bf423ca111dfd8c88630b955aab52453a153924

  • SHA256

    be63608b2dd6ef065d3db20b272d8128368b2baafe3db0943447ac3ba4071bc9

  • SHA512

    0d90b9a7a03b2caaada41e134d8def3e7b19514612b6993d962978083dcd55221da3bd3fe49a96133ef42d61ed55a0e29e567a00d14057ff83d885d1d0bd86e1

  • SSDEEP

    3072:2k3ot2NcNj/9Wp+me2xQdCUpbfAiaTdvOI31iaT:331WJWp+sQ4UZ4iaTtjPT

Score
10/10
pikabotbotnet

Malware Config

Extracted

Family

pikabot

C2

45.76.251.190

155.138.147.62

23.226.138.161

104.129.55.105

178.18.246.136

172.232.189.10

172.232.162.97

Targets

    • Target

      ffc39c3fdbe06c62d04f4853fd2f0dda2e745a2886776b2ee39418c53d764441.dll

    • Size

      193KB

    • MD5

      f5cea7d74d36624df4e136c6c74b30f0

    • SHA1

      892f2bd2f7582a6a8a98bc5e8c3876f6ec7a5af0

    • SHA256

      ffc39c3fdbe06c62d04f4853fd2f0dda2e745a2886776b2ee39418c53d764441

    • SHA512

      b2f3be9f408057d10372f66ed81f69d75eb3ea8d4f321108e5faf7ad1ade3092f50d9c0719a410c744f60fa9481cad6285a581740cda48029389ca1d7ba4d460

    • SSDEEP

      3072:fhVQkLSPB5/bhWll55++X1qxSKctXzFNI516skIprTf1vngLK/74:fhNLOBNcrPzqxfcrWrPkIpr/74

    Score
    10/10
    pikabotbotnet

    • PikaBot

      PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

      botnetpikabot

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks