Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
30231e02ded1ea164ef69006a17b62f2754b0f784443906e7043c6fed8a5fa84
-
Size
903KB
-
Sample
231127-da3hlsdh64
-
MD5
850f0b9c2921d43d572bdb671f1e580d
-
SHA1
2f5d26685154d42b76006cbfc3ee88ef64196b1c
-
SHA256
30231e02ded1ea164ef69006a17b62f2754b0f784443906e7043c6fed8a5fa84
-
SHA512
76ecca7704ce3ddc0099736d31d1cf11fd5ee67a3f86619d123d622a504cba3c5909210b22b65f5180c99cf16351ef027097fa5c86911669af23c1494d5c2904
-
SSDEEP
12288:DTUZ/Y95eo6L4ce7dG1lFlWcYT70pxnnaaoawZRVcTqSA+9rZNrI0AilFEvxHvB7:XqI4MROxnFMLqrZlI0AilFEvxHiJOB
Behavioral task
behavioral1
Sample
30231e02ded1ea164ef69006a17b62f2754b0f784443906e7043c6fed8a5fa84.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
30231e02ded1ea164ef69006a17b62f2754b0f784443906e7043c6fed8a5fa84.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
orcus
living-progressive.at.ply.gg:55162
eca35a01214c49548a1764d06681873c
-
autostart_method
Disable
-
enable_keylogger
false
-
install_path
%programfiles%\Orcus\Orcus.exe
-
reconnect_delay
10000
-
registry_keyname
Orcus
-
taskscheduler_taskname
Orcus
-
watchdog_path
AppData\OrcusWatchdog.exe
Targets
-
-
Target
30231e02ded1ea164ef69006a17b62f2754b0f784443906e7043c6fed8a5fa84
-
Size
903KB
-
MD5
850f0b9c2921d43d572bdb671f1e580d
-
SHA1
2f5d26685154d42b76006cbfc3ee88ef64196b1c
-
SHA256
30231e02ded1ea164ef69006a17b62f2754b0f784443906e7043c6fed8a5fa84
-
SHA512
76ecca7704ce3ddc0099736d31d1cf11fd5ee67a3f86619d123d622a504cba3c5909210b22b65f5180c99cf16351ef027097fa5c86911669af23c1494d5c2904
-
SSDEEP
12288:DTUZ/Y95eo6L4ce7dG1lFlWcYT70pxnnaaoawZRVcTqSA+9rZNrI0AilFEvxHvB7:XqI4MROxnFMLqrZlI0AilFEvxHiJOB
Score6/10-
Drops desktop.ini file(s)
-