Extracted

• • Target

    MGIU.exe

  • Size

    1.4MB

  • MD5

    cf435e0b10436bc7b504d6d4689e626c

  • SHA1

    9da40327c2638b56e79e21bdb3871e4fb2fa669d

  • SHA256

    3ba4bdd4bcea3f61fb13239dda807dc46d43af3e0f4d3b80caaac625e07a6cfa

  • SHA512

    02e12e4a129b418aa95db9c33f39d6600b4ec2a7ca687fffabbc33b4c51b5103e85ff16ad0e90690112a4f6e7d4a226c1d385ac2e603e18b0c3341d53674970a

  • SSDEEP

    24576:A3dhgAYmYqHU7pHYev00V6dCDdoVYdGp8VTALtMa6S:TmYqHU7pHYY00VcCDdowG3tMa6S

  Score

  10^/10

  pikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral1behavioral2