Overview

overview

3

Static

static

3

Orbit Unkn...ts.exe

windows7-x64

1

Orbit Unkn...ts.exe

windows10-2004-x64

1

Orbit/Driv...er.exe

windows7-x64

1

Orbit/Driv...er.exe

windows10-2004-x64

1

Orbit/Win10_22H2.dll

windows7-x64

1

Orbit/Win10_22H2.dll

windows10-2004-x64

1

Orbit/Win11_22H2.dll

windows7-x64

1

Orbit/Win11_22H2.dll

windows10-2004-x64

1

Orbit/cs2-dumper.exe

windows7-x64

1

Orbit/cs2-dumper.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    8s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    05/07/2024, 13:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    Orbit/Win11_22H2.dll

  • Size

    6KB

  • MD5

    b9a03b9fc83a7d20a3bb8a2368d5d59e

  • SHA1

    030efee2cf6e020c1a1513e37e2deb2b5d6201b3

  • SHA256

    19d9ea571aef985c3d356a6a50d8dcead4669ef359c1957e4f0f9557b18f6919

  • SHA512

    09e84adef1255fa5689e2184409989937fd167a85eb9a6326cd933318dc0ed56a7fc9bed9ace5601d2f86dd89f85512b49d5f20a4fac07844e2a0479a2e3c97a

  • SSDEEP

    96:ZfA38BjGcN5mwatzKaaHDaya+x6G2LTj6de+td1eDzQG7UBKP5cQ1S1J:ZfAMBj1ratWfHOHaefj0neDzvP9q

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Orbit\Win11_22H2.dll,#1
    1⤵
      PID:2464

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2464-2-0x000007FF70450000-0x000007FF7045A000-memory.dmp

            Filesize

            40KB

            Download

          • memory/2464-1-0x000007FF346C0000-0x000007FF34709000-memory.dmp

            Filesize

            292KB

            Download

          • memory/2464-0-0x0000000140000000-0x00000001405E8000-memory.dmp

            Filesize

            5.9MB

            Download

          • memory/2464-3-0x0000000001B10000-0x0000000001B6E000-memory.dmp

            Filesize

            376KB

            Download

          • memory/2464-5-0x000007FF709E0000-0x000007FF709F4000-memory.dmp

            Filesize

            80KB

            Download

          • memory/2464-4-0x000007FF404C0000-0x000007FF40580000-memory.dmp

            Filesize

            768KB

            Download