Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
27-05-2024 19:29
General
-
Target
scvhost.exe
-
Size
3.4MB
-
MD5
9ab1178a5c70cf83d7b40db848ff8ee0
-
SHA1
43a888f1028252adf023110315807fb80c7113c1
-
SHA256
0558fd9738cc4cb59130fa161c0ef401c189bf99958315fd2c6e218c10f26dcf
-
SHA512
7a3fe0a7cc0839fbdf6693a09d752bb27757e2a38e0b8d86424c5e9850420c0300ac310d34dabbb8acbc559e469dcabbcb10084887c01b178412e766b14360a3
-
SSDEEP
98304:6VOK0lWByzgx5x4z5ErcbFyDNesFQ561tozkMzXu7khZF:vluyzUQ5Er+H6GzkMQkhT
Score
10/10
Malware Config
Signatures
-
Orcus
Orcus is a Remote Access Trojan that is being sold on underground forums.
-
Orcurs Rat Executable 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\scvhost.exe"C:\Users\Admin\AppData\Local\Temp\scvhost.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
8KB
-
Filesize
3.8MB
-
Filesize
56KB
-
Filesize
368KB
-
Filesize
10.8MB
-
Filesize
10.8MB