Overview

overview

10

Static

static

3

1.dll

windows7-x64

1

1.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.exe

  • Size

    840KB

  • Sample

    240306-rxbkasga88

  • MD5

    c18ed17355b2cbeb35492c5655ce3169

  • SHA1

    4f6d42a41ed6fa567c8f0f835a2cd5662f7f3978

  • SHA256

    dcbbe31e1100edad1738c3f997543c5085b5b2a5b610dd08ada35427827c1231

  • SHA512

    82d5aa7a1b5d0e48b8532a58f734f1e7840e8a7907bf09677c46d80e43d6cb1cfc2bece10857c9f07a9cde4336bb5d0fee90fa25b38ed1566fcb9426a34b28bf

  • SSDEEP

    24576:ee9nfmpSVmL+Cf72yb1SFEtEfPmY4uRD7HpUMhOw8ghE:dBmpSVmLfCDfPJ4cDFPhmghE

Score
10/10
pikabotbotnet

Malware Config

Extracted

Family

pikabot

C2

154.53.55.165

158.247.240.58

154.12.236.248

Targets

    • Target

      1.exe

    • Size

      840KB

    • MD5

      c18ed17355b2cbeb35492c5655ce3169

    • SHA1

      4f6d42a41ed6fa567c8f0f835a2cd5662f7f3978

    • SHA256

      dcbbe31e1100edad1738c3f997543c5085b5b2a5b610dd08ada35427827c1231

    • SHA512

      82d5aa7a1b5d0e48b8532a58f734f1e7840e8a7907bf09677c46d80e43d6cb1cfc2bece10857c9f07a9cde4336bb5d0fee90fa25b38ed1566fcb9426a34b28bf

    • SSDEEP

      24576:ee9nfmpSVmL+Cf72yb1SFEtEfPmY4uRD7HpUMhOw8ghE:dBmpSVmLfCDfPJ4cDFPhmghE

    Score
    10/10
    pikabotbotnet

    • PikaBot

      PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

      botnetpikabot

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks