Overview

overview

10

Static

static

1

15e4de42f4...47.dll

windows10-1703-x64

10

15e4de42f4...47.dll

windows11-21h2-x64

10

Resubmissions

07-05-2024 12:45

240507-pzezdsgc5w 10

31-10-2023 12:21

231031-pjl3rsga3t 5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15e4de42f49ea4041e4063b991ddfc6523184310f03e645c17710b370ee75347.dll

  • Size

    1.2MB

  • Sample

    240507-pzezdsgc5w

  • MD5

    6f87cd47913c60e70a087534c07f14b5

  • SHA1

    ae5c8937272da7ac482d492fe2c2902e4e7c62ea

  • SHA256

    15e4de42f49ea4041e4063b991ddfc6523184310f03e645c17710b370ee75347

  • SHA512

    9b251f20d687e0165b011f493f6d2b062e1d5f0c737c5477b24f8224aa4ad9516602767c7231eadd8cde06ed3a8820b5a30c7312d210e7ef08d29a462393820a

  • SSDEEP

    24576:udKa5x+tEWhqlIVibDrGw/gxoTcX3ApgGl92RY0cPL/e:cH5xRWhZ+L/g6cXwiGlz0c7

Score
10/10
pikabotbotnet

Malware Config

Targets

    • Target

      15e4de42f49ea4041e4063b991ddfc6523184310f03e645c17710b370ee75347.dll

    • Size

      1.2MB

    • MD5

      6f87cd47913c60e70a087534c07f14b5

    • SHA1

      ae5c8937272da7ac482d492fe2c2902e4e7c62ea

    • SHA256

      15e4de42f49ea4041e4063b991ddfc6523184310f03e645c17710b370ee75347

    • SHA512

      9b251f20d687e0165b011f493f6d2b062e1d5f0c737c5477b24f8224aa4ad9516602767c7231eadd8cde06ed3a8820b5a30c7312d210e7ef08d29a462393820a

    • SSDEEP

      24576:udKa5x+tEWhqlIVibDrGw/gxoTcX3ApgGl92RY0cPL/e:cH5xRWhZ+L/g6cXwiGlz0c7

    Score
    10/10
    pikabotbotnet

    • Detects PikaBot botnet

    • PikaBot

      PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

      botnetpikabot

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks