Extracted

• • Target

    3290.png.dll

  • Size

    840KB

  • MD5

    72a127660a34aae5e734620f22a77a8a

  • SHA1

    9fe5934370d801df2c1d340456de15931ae392a0

  • SHA256

    326a84702468acaaa4b6aa0eecab55dcb8f443ddac5a6dfb66a4120a4e42ab49

  • SHA512

    d2c2e7e6bae99cef36af68168c6809f4cdb03d332c5e0c505a70baac5941ddf3f3d6ee35f9e4fcd3c70e0630e7ac07a30f3398d00dba9b7632d1cf9071bcacb0

  • SSDEEP

    24576:6e9nfmpSVmL+Cf72yb1SFEtEfPmY4uRD7HpUMhOw8ghE:pBmpSVmLfCDfPJ4cDFPhmghE

  Score

  10^/10

  pikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    launcher.bat

  • Size

    70B

  • MD5

    70c96b6b962525522af80754c7bcd149

  • SHA1

    53f0dfda950efc0accdf179c43df49ffc1709787

  • SHA256

    98bb57008710d6606f39855433c3f080921cddcd23efa6862208fd8749258976

  • SHA512

    830468a2ed9d2334a73381b833e6bbe2de79482efc20cb8e2af36522df57295e88efabe66e3b8b5310338eca44429817570220d7d5cf32285a05fb9d1a5a7dfb

  Score

  10^/10

  pikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral3behavioral4