Extracted

• • Target

    ER.exe

  • Size

    1.4MB

  • MD5

    c38dd211b6f0360a53fc0c70fc6d3529

  • SHA1

    7670dbdaa159f4f82777899836d09047d5d739fb

  • SHA256

    be992d892d7448e2fe6d6bb0f6de72fbb247ef068e6cbb8c302a2486a8aceebb

  • SHA512

    c9062f598fe4721e96c7224424939dfa3890dcb6025396f8a64a993d74b9e596bd330e9c2d8c624d36550626389a87e6281d057c1bf28d3da6314ba66c77e8ab

  • SSDEEP

    24576:i3dhgAYmYqHU7pHYev00V6dCDdoVYdGp8VTALtMa6:tmYqHU7pHYY00VcCDdowG3tMa6

  Score

  10^/10

  pikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral1behavioral2