Extracted

• • Target

    fb13f1443013b5a4108b79253487506b9fbf572cf9c7fb1dc8c098da71545edc.exe

  • Size

    1.4MB

  • MD5

    6f21cb2e1cc2b7a411f3c1ec17476737

  • SHA1

    152e4851a2dbb853c7d17a36575a470c59b5a805

  • SHA256

    fb13f1443013b5a4108b79253487506b9fbf572cf9c7fb1dc8c098da71545edc

  • SHA512

    15a9506519ab5b78cd31dfcae4757db83277ca7b3c4c9a0e72d517116dd2c2cc3c157d1591bb337ae713f9fc13f140b26a013e634e9a1270237de797fcaf2e4b

  • SSDEEP

    24576:d3dhgAYmYqHU7pHYev00V6dCDdoVYdGp8VTALtMa6x:ImYqHU7pHYY00VcCDdowG3tMa6x

  Score

  10^/10

  pikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral1behavioral2