General

  • Target

    4d8f54b347c038242af3701c2ae66de6df545f345713f3f224b7e11805f9b0e0

  • Size

    1.8MB

  • MD5

    4319115b7e08e7a14218b8ef89437945

  • SHA1

    53df767b6546b47edd0bc97bf29a1431cc749524

  • SHA256

    4d8f54b347c038242af3701c2ae66de6df545f345713f3f224b7e11805f9b0e0

  • SHA512

    3c40fb9964b2c2c6dcedfb3e41558d95978b89403165ccd4fb7ddf754ab762bd95ec3d01504f2b11ac20efc65997b672a98a88568a5ab53f9f1233c6a7dcdeb8

  • SSDEEP

    49152:n44h8NE4s9de2l0KlTuX1IorD0ZNtmn+/U/6KPD7DjILFcpQTKQ:nh4s9dD7lSr0ZiKs

Score
10/10

Malware Config

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
  • Orcus main payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d8f54b347c038242af3701c2ae66de6df545f345713f3f224b7e11805f9b0e0
    .dll windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Exports

    Sections