Extracted

• • Target

    1137b149e0bced9e6700658b526bd7eb27f59e0850bef8ee843359d887f6f131.exe

  • Size

    1.4MB

  • MD5

    5940a7f204f6bc04518afe1483f909d4

  • SHA1

    ce4e7d83a520e8008210b4f6ee40111941df2b1b

  • SHA256

    1137b149e0bced9e6700658b526bd7eb27f59e0850bef8ee843359d887f6f131

  • SHA512

    bb3e7af7a1ec4ee42e6192e2245a385fa6605e8f1bf541ee6b9a8d6a397daec5c55c1957bf56e7aa871505c6c18953327491e54ce6276132c4f412a2990b13c4

  • SSDEEP

    24576:v3dhgAYmYqHU7pHYev00V6dCDdoVYdGp8VTALtMa6:ymYqHU7pHYY00VcCDdowG3tMa6

  Score

  10^/10

  pikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral1behavioral2