General

  • Target

    Orbit.zip

  • Size

    842KB

  • MD5

    8c4248c4812f68adc06060dca432bc55

  • SHA1

    fcd48323de01cc3d1f1fc8f3f232f2e14849e839

  • SHA256

    c69aedd3e81df51d40f79f3be4060b7a7037f6fb7adb80dac3f17121814b3408

  • SHA512

    b84c0dc9dd965e073dc7736a0f96aea3543e9a373146b815c7c878e099b84e666b27318540ff04d648ea73c5cf29e67ed2e1b76edb6acf99a20b6fd694f47ccd

  • SSDEEP

    12288:TbJT7w03BGw5oJJZYjA/7jo/2hRf4zm3g8xowLLQLoiRS/XqpetMPMKmkmtnUA3g:TlAJ0jA/XWNeow+BKKxvwm8SB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Orbit.zip
    .zip

    Password: infected

  • Orbit Unknowncheats.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    0c74767a08b9a08fbfe4ac65ded92c68


    Headers

    Imports

    Sections

  • Orbit/DisableHypervisorEnforcedCodeIntegrity.reg
  • Orbit/DisableVulnerableDriverList.reg
  • Orbit/DriverMapper.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    5316a309ccf25a6ed74424e6475fbb52


    Headers

    Imports

    Sections

  • Orbit/GrenadeHelper.txt
  • Orbit/SamsungSans-Regular.ttf
  • Orbit/SmallestPixel7-Regular.ttf
  • Orbit/Weaponicons-Regular.ttf
  • Orbit/Win10_22H2.sys
    .dll windows:6 windows x64 arch:x64

    Password: infected

    85b6bcf2dc89f33f030f73c5002a7155


    Headers

    Imports

    Sections

  • Orbit/Win11_22H2.sys
    .dll windows:6 windows x64 arch:x64

    Password: infected

    85b6bcf2dc89f33f030f73c5002a7155


    Headers

    Imports

    Sections

  • Orbit/Zappericons-Regular.ttf