General

  • Target

    https://github.com/BlitzedOfficial/BlitzedGrabberX96NEON

  • Sample

    240209-13e94sgf53

Malware Config

Targets

    • Target

      https://github.com/BlitzedOfficial/BlitzedGrabberX96NEON

    • Orcus

      Orcus is a Remote Access Trojan that is being sold on underground forums.

    • Orcus main payload

    • Orcurs Rat Executable

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks