Overview

overview

10

Static

static

10

37a5d09e0a...9b.exe

windows7-x64

8

37a5d09e0a...9b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37a5d09e0a7aa83dbc12d566db9696d1c7f385520e84c5e2b2614dc030a9a59b

  • Size

    917KB

  • MD5

    1bef29190406bbeda2d4d240799c9548

  • SHA1

    26082172ee73bc2d80203c15fd68b1279072a1af

  • SHA256

    37a5d09e0a7aa83dbc12d566db9696d1c7f385520e84c5e2b2614dc030a9a59b

  • SHA512

    e61de92e929b29088810145e477c4393a521e94a0f434ea72f8769e12af38e7e790a762c84d4ae41bcd8fa8b2ff52a8d8c2696f4ea0435c8d6484a14c6d5165d

  • SSDEEP

    24576:zrG4MROxnFD3PEsYxrZlI0AilFEvxHiBWX:zrFMiJKrZlI0AilFEvxHiB

Score
10/10
orcus

Malware Config

Extracted

Family

orcus

C2

cuveehackedurpc.ddns.net:10134

Mutex

d8fb3f8f45ee4ba0860a98695ce60a08

Attributes
  • autostart_method

    Disable

  • enable_keylogger

    false

  • install_path

    %programfiles%\Orcus\Orcus.exe

  • reconnect_delay

    10000

  • registry_keyname

    Orcus

  • taskscheduler_taskname

    Orcus

  • watchdog_path

    Temp\svhost.exe

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
    orcus
  • Orcus main payload 1 IoCs

Files

  • 37a5d09e0a7aa83dbc12d566db9696d1c7f385520e84c5e2b2614dc030a9a59b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections