Analysis

  • max time kernel
    362s
  • max time network
    366s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/04/2024, 18:20

General

  • Target

    OrcusRemover.exe

  • Size

    18KB

  • MD5

    6a18060129b8ed019bbe6401439e7eb7

  • SHA1

    556cda105713494da829a2b23696f1b1b2b1d4fa

  • SHA256

    9434997f9207933115616cf6a3dfa6026675d08acf5ad08a74133a2334132df9

  • SHA512

    1ddd2c4e7e8868d3d0ba20256411647b33e722e6ee60bd1e6df591dab16ab275b89bee351fddf392b2c9d3b6de9b48e127c23fabad5a88b5ff44489f1b779e7b

  • SSDEEP

    384:0ox3KJBfZ5+NkP2QaCTBQtBW/BKScTiM/vRZJTl6dE80mmmrl9JUhsVlfW:0VZ5OtspKjp3r6qq6

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\OrcusRemover.exe
    "C:\Users\Admin\AppData\Local\Temp\OrcusRemover.exe"
    1⤵
      PID:2236

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2236-0-0x0000000000940000-0x000000000094A000-memory.dmp

            Filesize

            40KB

          • memory/2236-1-0x0000000073EE0000-0x00000000745CE000-memory.dmp

            Filesize

            6.9MB

          • memory/2236-2-0x0000000004DB0000-0x0000000004DF0000-memory.dmp

            Filesize

            256KB

          • memory/2236-3-0x0000000004DB0000-0x0000000004DF0000-memory.dmp

            Filesize

            256KB

          • memory/2236-4-0x0000000004DB0000-0x0000000004DF0000-memory.dmp

            Filesize

            256KB

          • memory/2236-5-0x0000000073EE0000-0x00000000745CE000-memory.dmp

            Filesize

            6.9MB

          • memory/2236-6-0x0000000004DB0000-0x0000000004DF0000-memory.dmp

            Filesize

            256KB

          • memory/2236-7-0x0000000004DB0000-0x0000000004DF0000-memory.dmp

            Filesize

            256KB

          • memory/2236-8-0x0000000004DB0000-0x0000000004DF0000-memory.dmp

            Filesize

            256KB