Overview

overview

10

Static

static

10

123.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    123.exe

  • Size

    920KB

  • MD5

    0c3a0dd404b8df55d5cd87075a0246f1

  • SHA1

    f3431504346c13366c1af44e3b4d757a9633f000

  • SHA256

    08099ea38e34c843611cfff9231298765a9343a2aa7ff77e2fe064cb9b103c7e

  • SHA512

    7840213d3c51dbd4bdd6e7c2177c0f7f3399933c65464bc7b44e88ebe352b4801dcb71e9d022f521192b396045931cdec43b5e5d0f2059578676059acadc1291

  • SSDEEP

    24576:vkL94MROxnFt3QNrrcI0AilFEvxHPO6sooC:MWMij2rrcI0AilFEvxHP

Score
10/10
aaaorcus

Malware Config

Extracted

Family

orcus

Botnet

aaa

C2

229.ip.ply.gg:59939

Mutex

1c89c1c45abd4b98bb49af07fead165c

Attributes
  • autostart_method

    Registry

  • enable_keylogger

    true

  • install_path

    %programfiles%\Orcus\Orcus.exe

  • reconnect_delay

    10000

  • registry_keyname

    Orcus

  • taskscheduler_taskname

    Orcus

  • watchdog_path

    AppData\OrcusWatchdog.exe

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
    orcus
  • Orcus main payload 1 IoCs

Files

  • 123.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections