Extracted

• • Target

    04e222ce902b82d05dabc7fbd3123945b9721aaba38b2bb68c2aa305dc214384.exe

  • Size

    1.4MB

  • MD5

    b7e3cd0eef8a00eb7c6a916386e7ee0e

  • SHA1

    44844b02c42585da9ab37e439dc0a87c7a4e2f62

  • SHA256

    04e222ce902b82d05dabc7fbd3123945b9721aaba38b2bb68c2aa305dc214384

  • SHA512

    b21d3fcf7746383a17c80aaeeedb69862e0c214c3229d48961ca5b11be18e8e2ebf4e5cd554d6a80fcd80929ce3937ae38880e3f10e67f5336e5afacc0585df2

  • SSDEEP

    24576:03dhgAYmYqHU7pHYev00V6dCDdoVYdGp8VTALtMa6:3mYqHU7pHYY00VcCDdowG3tMa6

  Score

  10^/10

  discoverypikabotbotnet

  • PikaBot

    PikaBot is a botnet that is distributed similarly to Qakbot and written in c++.

    botnetpikabot

  • Suspicious use of SetThreadContext

  behavioral1behavioral2