Overview

overview

10

Static

static

10

hh.exe

windows7-x64

1

hh.exe

windows10-2004-x64

8

Resubmissions

06/11/2022, 12:47

221106-pz6r4scad7 10

06/11/2022, 12:33

221106-pq7m2sdgfq 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    hh.exe

  • Size

    903KB

  • MD5

    1a77561721c291ac9eee38315ca4abca

  • SHA1

    f0a96ec91a72f3a6ca44e3d627cc9cdbfc90c6af

  • SHA256

    bee02c9fc120655b3481fa30aef7f9ace1848e0e216c3df6cf7162ae60abe9e4

  • SHA512

    de9c0b71558125589830da42e836c75e6531109b379991667bc9854b894f5671801ea036adf4c97f1a05b5218cf4a9a3a53b077f04b5a230ab56db1ac29dbc8e

  • SSDEEP

    12288:38shHAVBuQBBed37dG1lFlWcYT70pxnnaaoawMRVcTqSA+9rZNrI0AilFEvxHvB1:M3s4MROxnF9LqrZlI0AilFEvxHivo

Score
10/10
orcus

Malware Config

Extracted

Family

orcus

C2

138.2.146.162:3544

Mutex

2d89725e92784768b462da74da4f130d

Attributes
  • autostart_method

    Disable

  • enable_keylogger

    false

  • install_path

    %programfiles%\Orcus\Orcus.exe

  • reconnect_delay

    10000

  • registry_keyname

    Orcus

  • taskscheduler_taskname

    Orcus

  • watchdog_path

    AppData\OrcusWatchdog.exe

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
    orcus
  • Orcus main payload 1 IoCs

Files

  • hh.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections