ffa6a6b56c154ed6ae3de4b31ee05bd5c1e8161954fe79ffc9f6dc8408d24659.exe

Classification: Malicious

ffa6a6b56c154ed6ae3de4b31ee05bd5c1e8161954fe79ffc9f6dc8408d24659.exe is a malicious file sample. Linked to Pikabot malware. Detected by 58 antivirus engines.

Detection summary

  • 58 antivirus detections
  • 0 IDS alerts
  • 2 processes observed
  • 1 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: PIKABOT (S1145)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Pikabot Triage 2026-07-10 14:43:31 2026-07-22 16:24:25 malicious-activity S1145 Pikabot
Generic Malware Hybrid-Analysis 2025-07-25 08:30:04 2025-07-28 07:00:22

Tags

pikabot botnet discovery

Sample information

Filenames
ffa6a6b56c154ed6ae3de4b31ee05bd5c1e8161954fe79ffc9f6dc8408d24659.exe, ffa6a6b56c154ed6ae3de4b31ee05bd5c1e8161954fe79ffc9f6dc8408d24659
File type
PE32 executable (GUI) Intel 80386 (stripped to ext ...
Size
83968 bytes
MD5
fc02f813561da2a765bcb85fa9b82bd5
SHA-1
b057620494285d4a65d0ecab77abffb8c1083262
SHA-256
ffa6a6b56c154ed6ae3de4b31ee05bd5c1e8161954fe79ffc9f6dc8408d24659
First indexed
2025-07-25 08:15:23
Last updated
2026-08-14 07:19:46

Antivirus detections

EngineDetection
ALYacGen:Variant.Fragtor.730907
APEXMalicious
AVGWin32:Evo-gen [Trj]
AhnLab-V3Trojan/Win.PikaBot.C5712092
AlibabaTrojan:Win32/PikaBot.6c574e3c
Antiy-AVLTrojan/Win32.Convagent
ArcabitTrojan.Fragtor.DB271B
AvastWin32:Evo-gen [Trj]
AviraTR/Redcap.fevwn
BitDefenderGen:Variant.Fragtor.730907
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.1719096803b82bd5
CTXexe.trojan.generic
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
ESET-NOD32a variant of Win32/PikaBot.AD
ElasticWindows.Trojan.PikaBot
EmsisoftGen:Variant.Fragtor.730907 (B)
F-SecureTrojan.TR/Redcap.fevwn
FortinetW32/PikaBot.AD!tr
GDataGen:Variant.Fragtor.730907
GoogleDetected
IkarusTrojan.Win32.Pikabot
K7AntiVirusTrojan ( 005b1c3d1 )
K7GWTrojan ( 005b1c3d1 )
KasperskyTrojan.Win32.Agent.xbrbom
KingsoftWin32.Trojan.Agent.xbrbom
LionicTrojan.Win32.PikaBot.4!c
MalwarebytesMalware.AI.4023486028
MaxSecureTrojan.Malware.259797585.susgen
McAfeeDti!FFA6A6B56C15
MicroWorld-eScanGen:Variant.Fragtor.730907
MicrosoftTrojan:Win32/Pikabot.FN!MTB
NANO-AntivirusVirus.Win32.Gen.ccmw
Paloaltogeneric.ml
PandaTrj/CI.A
RisingTrojan.Agent!8.B1E (TFE:2:eOYF56cagwO)
SangforTrojan.Win32.Pikabot.V383
SkyhighBehavesLike.Win32.Generic.mh
SophosTroj/Pikabot-X
SymantecW32.Pikabot!gm1
TencentMalware.Win32.Gencirc.14105027
Trapminesuspicious.low.ml.score
TrellixENSArtemis!FC02F813561D
TrendMicroTROJ_GEN.R002C0DEM25
TrendMicro-HouseCallTROJ_GEN.R002C0DEM25
VBA32Trojan.Agent
VIPREGen:Variant.Fragtor.730907
VaristW32/ABTrojan.FQVB-2671
VirITTrojan.Win32.Genus.XKF
XcitiumMalware@#15unv5sut50jr
YandexTrojan.Agent!EcHpvhhSy/0
ZillyaTrojan.Agent.Win32.3971323
ZoneAlarmTroj/Pikabot-X
alibabacloudTrojan:Win/PikaBot.AF
huorongTrojan/PikaBot.t

Network contacts

158.220.80.167

Process list

NameCommand line
ffa6a6b56c154ed6ae3de4b31ee05bd5c1e8161954fe79ffc9f6dc8408d24659.exe
ffa6a6b56c154ed6ae3de4b31ee05bd5c1e8161954fe79ffc9f6dc8408d24659.exe