Pulsedive Blog | Pikabot Rising
Tags
cmtmf-attack-pattern: Masquerading
country: Belgium Sierra Leone Uzbekistan Russia Togo
maec-delivery-vectors: Watering Hole
attack-pattern: Control Panel - T1218.002 Javascript - T1059.007 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 System Information Discovery - T1426 Phishing - T1660 Phishing - T1566 Process Hollowing - T1055.012 Python - T1059.006 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Software - T1592.002 Masquerading - T1036 Process Hollowing - T1093 Rundll32 - T1085 Scripting - T1064 System Information Discovery - T1082 User Execution - T1204 Masquerading Scripting User Execution
Show in Graph
Common Information
Type Value
UUID 7501a019-ef49-4f54-9d23-b9afb9c34d46
Fingerprint a48b2e152bb7b293
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 22, 2024, midnight
Added to db Aug. 31, 2024, 1:19 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline PikaBot Rising
Title Pulsedive Blog | Pikabot Rising
Detected Hints/Tags/Attributes 57/4/5
Source URLs
Redirection Url
Details Source https://blog.pulsedive.com/pikabot/
URL Provider
Details Provider Source level domain
Details pulsedive.com blog.pulsedive.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 47 ✔ Pulsedive Blog https://blog.pulsedive.com/rss/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 1018 
rundll32.exe
Details File 23 
searchprotocolhost.exe
Details File 51 
ipconfig.exe
Details File 62 
whoami.exe
Details sha256 3 
39d6f7865949ae7bb846f56bff4f62a96d7277d2872fec68c09e1227e6db9206