General

  • Target
    dd2b6e3aa75de8460730862f2dc739537734a7dfc9e673b6a23ee58430348ddf.zip
  • Size 452KB
  • Sample240402-mk8baafe47
  • SHA256 0c74a497b05870e841cfa733c3ceb5ee76ff99b33a5071c764d04bcebb1106c1
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • pikabot

C2
  • 154.53.55.165

  • 158.247.240.58

  • 154.12.236.248

Targets

    • Target
      dd2b6e3aa75de8460730862f2dc739537734a7dfc9e673b6a23ee58430348ddf.dll
    • Size 840KB
    • SHA256 dd2b6e3aa75de8460730862f2dc739537734a7dfc9e673b6a23ee58430348ddf
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • PikaBot

      PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks