Overview

overview

10

Static

static

10

Loader.exe

windows7-x64

10

Loader.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Loader.exe

  • Size

    921KB

  • MD5

    43ad9f7ac9fdfaf0a49d563f5d0e9756

  • SHA1

    b710518a0082046b697ab32ccd6a6b3c844feb44

  • SHA256

    8e2411434b3f596ffb6ecf25e531e4804fba22233936c270856408383c4cdb34

  • SHA512

    08024ef6c5373957eb295513beef6bbc76e6215cf3553f4b7a04b74b79f470151b65f383a729ef20ef1de798a67d0a8392061057c3308be3100f652b201fb88f

  • SSDEEP

    24576:Mk84MROxnFt39tQYrZlI0AilFEvxHiPOjZ:MkPMijXPrZlI0AilFEvxHi

Score
10/10
orcus

Malware Config

Extracted

Family

orcus

C2

centre-shaped.gl.at.ply.gg:30015

Mutex

84b9b2a201bd435688f1dd6a481686ed

Attributes
  • autostart_method

    Registry

  • enable_keylogger

    true

  • install_path

    C:\Windows\DriverUpdater\Updater.exe

  • reconnect_delay

    10000

  • registry_keyname

    Winlog0n

  • taskscheduler_taskname

    Orcus

  • watchdog_path

    AppData\OrcusWatchdog.exe

Signatures

  • Orcurs Rat Executable 1 IoCs
  • Orcus family
    orcus
  • Orcus main payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections