Resubmissions

07-05-2024 12:45

240507-pzezdsgc5w 10

31-10-2023 12:21

231031-pjl3rsga3t 5

General

  • Target

    15e4de42f49ea4041e4063b991ddfc6523184310f03e645c17710b370ee75347.dll

  • Size

    1.2MB

  • Sample

    240507-pzezdsgc5w

  • MD5

    6f87cd47913c60e70a087534c07f14b5

  • SHA1

    ae5c8937272da7ac482d492fe2c2902e4e7c62ea

  • SHA256

    15e4de42f49ea4041e4063b991ddfc6523184310f03e645c17710b370ee75347

  • SHA512

    9b251f20d687e0165b011f493f6d2b062e1d5f0c737c5477b24f8224aa4ad9516602767c7231eadd8cde06ed3a8820b5a30c7312d210e7ef08d29a462393820a

  • SSDEEP

    24576:udKa5x+tEWhqlIVibDrGw/gxoTcX3ApgGl92RY0cPL/e:cH5xRWhZ+L/g6cXwiGlz0c7

Score
10/10

Malware Config

Targets

    • Target

      15e4de42f49ea4041e4063b991ddfc6523184310f03e645c17710b370ee75347.dll

    • Size

      1.2MB

    • MD5

      6f87cd47913c60e70a087534c07f14b5

    • SHA1

      ae5c8937272da7ac482d492fe2c2902e4e7c62ea

    • SHA256

      15e4de42f49ea4041e4063b991ddfc6523184310f03e645c17710b370ee75347

    • SHA512

      9b251f20d687e0165b011f493f6d2b062e1d5f0c737c5477b24f8224aa4ad9516602767c7231eadd8cde06ed3a8820b5a30c7312d210e7ef08d29a462393820a

    • SSDEEP

      24576:udKa5x+tEWhqlIVibDrGw/gxoTcX3ApgGl92RY0cPL/e:cH5xRWhZ+L/g6cXwiGlz0c7

    Score
    10/10
    • Detects PikaBot botnet

    • PikaBot

      PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks