Overview

overview

10

Static

static

10

virus.exe

windows7-x64

10

virus.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    virus.exe

  • Size

    926KB

  • MD5

    3b2914252d4eb44178ea90b0d23dc2a6

  • SHA1

    6d924f3ca475734009ba562f7a63d1dfefa0ae43

  • SHA256

    c6689c96e5dac713d9c2993092f414ce6e7c84bf5243a9e483c672a505c333ba

  • SHA512

    c652cd9c8f32eed1cbc86bd41a1d257d7737ea915399f8d99e5a13f0c2c10755e601aab30c3c991f08c1b5a37622ba2f346ff97d734a5953604826b3d52814cb

  • SSDEEP

    24576:hBB4MROxnFE3viIrrcI0AilFEvxHPXFoo/:hQMiuqIrrcI0AilFEvxHP

Score
10/10
hackedorcus

Malware Config

Extracted

Family

orcus

Botnet

Hacked

C2

212.ip.ply.gg:21954

Mutex

9bb3357ddd2d4c29a7bb7dd1da3ddf78

Attributes
  • autostart_method

    Registry

  • enable_keylogger

    false

  • install_path

    %programfiles%\Steam\steam.exe

  • reconnect_delay

    10000

  • registry_keyname

    steam

  • taskscheduler_taskname

    steam

  • watchdog_path

    AppData\svchost.exe

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
    orcus
  • Orcus main payload 1 IoCs

Files

  • virus.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections