Extracted

• • Target

    89dc50024836f9ad406504a3b7445d284e97ec5dafdd8f2741f496cac84ccda9.exe

  • Size

    3.3MB

  • MD5

    f316f291a2998d6bbce2674c8aa3f349

  • SHA1

    bbe00380a62900c286d8506a040d99718dfd8932

  • SHA256

    89dc50024836f9ad406504a3b7445d284e97ec5dafdd8f2741f496cac84ccda9

  • SHA512

    84770262959e3b1470b324775e5d06665008b09f0f5de33eef02efab77a8a560b44d3a59668ab91294c79cf58ef026aa2ff5bd9b6199e6a0d5b295ff209ffe6b

  • SSDEEP

    49152:DCXtvRXOhEc2MgyyuTEGQp8EamZaFChW7ZaxJmLufu4a:DCxRXOhEc2MgJHTp+isLf

  Score

  10^/10

  pikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral1behavioral2