Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
029e1ac599d7cce9e16d0eaba1e35bfb8622c38e59e09e6e3bf7a7fcdb30118d
-
Size
913KB
-
Sample
240108-bke4yshebl
-
MD5
7297f472ec693d328134a78c372c916e
-
SHA1
c48c7c3e596385f97ac5aea8c9771a94c2719fef
-
SHA256
029e1ac599d7cce9e16d0eaba1e35bfb8622c38e59e09e6e3bf7a7fcdb30118d
-
SHA512
407849388bdd46df5423ebebb4e5bfe02e38582a95556a558b23aeef68b4679a562f756cb4c976ed3d851bc805dc697948d907a0d5d27630e9d6adb89527cdfd
-
SSDEEP
12288:C0XCGPSX0zbyD+ndg+QCImGYUl9qyzlkE2kUNCOMpiAkTfYjSp2y5NU7dG1lFlWI:eo84MROxnFtCVBrrcI0AilFEvxHjxQz
Behavioral task
behavioral1
Sample
029e1ac599d7cce9e16d0eaba1e35bfb8622c38e59e09e6e3bf7a7fcdb30118d.exe
Resource
win7-20231129-en
Malware Config
Extracted
orcus
nonamedc.mcv.kr:8080
fcca7214f2cf43aa90403230957e4103
-
autostart_method
Disable
-
enable_keylogger
true
-
install_path
%programfiles%\Orcus\Orcus.exe
-
reconnect_delay
10000
-
registry_keyname
Orcus
-
taskscheduler_taskname
Orcus
-
watchdog_path
AppData\OrcusWatchdog.exe
Targets
-
-
Target
029e1ac599d7cce9e16d0eaba1e35bfb8622c38e59e09e6e3bf7a7fcdb30118d
-
Size
913KB
-
MD5
7297f472ec693d328134a78c372c916e
-
SHA1
c48c7c3e596385f97ac5aea8c9771a94c2719fef
-
SHA256
029e1ac599d7cce9e16d0eaba1e35bfb8622c38e59e09e6e3bf7a7fcdb30118d
-
SHA512
407849388bdd46df5423ebebb4e5bfe02e38582a95556a558b23aeef68b4679a562f756cb4c976ed3d851bc805dc697948d907a0d5d27630e9d6adb89527cdfd
-
SSDEEP
12288:C0XCGPSX0zbyD+ndg+QCImGYUl9qyzlkE2kUNCOMpiAkTfYjSp2y5NU7dG1lFlWI:eo84MROxnFtCVBrrcI0AilFEvxHjxQz
-
Orcurs Rat Executable
-