Overview

overview

10

Static

static

3

238dcc5611...46.dll

windows7-x64

1

238dcc5611...46.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    238dcc5611ed9066b63d2d0109c9b623f54f8d7b61d5f9de59694cfc60a4e646.zip
  • Size 452KB
  • Sample240402-mk638afa31
  • SHA256 b5f62b5c5fc6b14c1817aadd8b19027e763c00ecaf68934cef13c3b55a3c7290
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
pikabotbotnet

Malware Config

Extracted

Family

  • pikabot

C2

  • 154.53.55.165

  • 158.247.240.58

  • 154.12.236.248

Targets

    • Target
      238dcc5611ed9066b63d2d0109c9b623f54f8d7b61d5f9de59694cfc60a4e646.dll
    • Size 840KB
    • SHA256 238dcc5611ed9066b63d2d0109c9b623f54f8d7b61d5f9de59694cfc60a4e646
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    pikabotbotnet

    • PikaBot

      PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

      botnetpikabot

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks