Extracted

• • Target

    7e4c7aab11985cb490f2792defcf57a11b4a5fb0d4410ba002439c540ce53296.exe

  • Size

    1.4MB

  • MD5

    cf4bc87ba864d0ebf69434b63e7ed59b

  • SHA1

    43e104dc7fc474b0f1b7cc0814578b2505b2298b

  • SHA256

    7e4c7aab11985cb490f2792defcf57a11b4a5fb0d4410ba002439c540ce53296

  • SHA512

    9efe4af32cd8071f5b42efc21b5f96d97954ae942ce4f2ce93a7d654db619918608b18227ead2130faaf90872e4c7c6b2ce4956fd80669f1e31ddaa4404e89e4

  • SSDEEP

    24576:P3dhgAYmYqHU7pHYev00V6dCDdoVYdGp8VTALtMa6s:SmYqHU7pHYY00VcCDdowG3tMa6s

  Score

  10^/10

  pikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral1behavioral2