orcus | a71f91351dc1bb57f0426080f2c03854[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

Reason

config extraction: CfgExtr crashed: runtime error: slice bounds out of range [41:0]

General

Target
a71f91351dc1bb57f0426080f2c03854.exe
Size 8.4MB
Sample210717-98tnta93m2
SHA256 f95e19a66cb1e3a612f2c07380376196e856dfefbe1038c4e6fd7d6a03388b5d
MD5 a71f91351dc1bb57f0426080f2c03854
SHA1 a336bd9298b0772f4d5764f695335fc7ef99755b
SHA512 dff5db2f6b3af11d10cb25c6e9df6df5bd4668ff54ba4ff1b6456ee7ab338e59297bad4d8722e7da15d175eabcd5833a632e5d62970d04993c733c379b7f4d19
MD5 SHA1 SHA512

Score

10^/10

pyinstaller orcus asyncrat

Malware Config

Signatures

Asyncrat family
asyncrat

Orcurs Rat Executable 1 IoCs

resource	yara_rule
sample	orcus

Orcus Main Payload 1 IoCs

resource	yara_rule
sample	family_orcus

Orcus family
orcus

Detects Pyinstaller 1 IoCs

resource	yara_rule
sample	pyinstaller

File Explorer

a71f91351dc1bb57f0426080f2c03854.exe

.exe 8.4MB

a71f91351dc1bb57f0426080f2c03854.exe

SHA256 f95e19a66cb1e3a612f2c07380376196e856dfefbe1038c4e6fd7d6a03388b5d
MD5 a71f91351dc1bb57f0426080f2c03854
SHA1 a336bd9298b0772f4d5764f695335fc7ef99755b
SHA512 dff5db2f6b3af11d10cb25c6e9df6df5bd4668ff54ba4ff1b6456ee7ab338e59297bad4d8722e7da15d175eabcd5833a632e5d62970d04993c733c379b7f4d19
MD5 SHA1 SHA512

windows x86

Orcurs Rat Executable
Orcus Main Payload
Detects Pyinstaller

pyinstaller