General
-
Target
c4648a910c7f5c0d9c13a57264e8c96b6943cc52bad8e2b63d11c0255c8613c6.exe
-
Size
1.4MB
-
Sample
240726-gjflzszdjj
-
MD5
bcca7e334ba642b55d77466fd6eb0062
-
SHA1
3bd95a18318c89ef5a244020816085b5062d6a71
-
SHA256
c4648a910c7f5c0d9c13a57264e8c96b6943cc52bad8e2b63d11c0255c8613c6
-
SHA512
7d7514a56a10eb1f3bcddd3bb8532c2d4501c5ec88b503e8a64c00206cedae3ee123c7c22fda025fe710736bda31c70bcc34b5578a7766b2535d49b56d347811
-
SSDEEP
24576:d3dhgAYmYqHU7pHYev00V6dCDdoVYdGp8VTALtMa6:ImYqHU7pHYY00VcCDdowG3tMa6
Static task
static1
Behavioral task
behavioral1
Sample
c4648a910c7f5c0d9c13a57264e8c96b6943cc52bad8e2b63d11c0255c8613c6.exe
Resource
win7-20240705-en
Malware Config
Extracted
pikabot
https://109.199.99.131:13721
https://154.38.175.241:13721
https://148.113.141.220:2224
https://23.226.138.143:2083
https://89.117.23.186:5686
https://23.226.138.161:5242
https://103.82.243.5:13721
https://145.239.135.24:5243
https://185.179.217.216:9785
https://154.12.248.41:5000
https://178.18.246.136:2078
https://141.95.106.106:2967
https://104.129.55.105:2223
https://57.128.165.176:13721
https://89.117.23.185:2221
https://86.38.225.106:2221
https://37.60.242.86:2967
https://37.60.242.85:9785
https://89.117.23.34:5938
https://154.12.233.66:2224
Targets
-
-
Target
c4648a910c7f5c0d9c13a57264e8c96b6943cc52bad8e2b63d11c0255c8613c6.exe
-
Size
1.4MB
-
MD5
bcca7e334ba642b55d77466fd6eb0062
-
SHA1
3bd95a18318c89ef5a244020816085b5062d6a71
-
SHA256
c4648a910c7f5c0d9c13a57264e8c96b6943cc52bad8e2b63d11c0255c8613c6
-
SHA512
7d7514a56a10eb1f3bcddd3bb8532c2d4501c5ec88b503e8a64c00206cedae3ee123c7c22fda025fe710736bda31c70bcc34b5578a7766b2535d49b56d347811
-
SSDEEP
24576:d3dhgAYmYqHU7pHYev00V6dCDdoVYdGp8VTALtMa6:ImYqHU7pHYY00VcCDdowG3tMa6
-
Suspicious use of SetThreadContext
-