Overview
overview
10Static
static
10Orcus RAT ...on.exe
windows7-x64
1Orcus RAT ...on.exe
windows10-2004-x64
10Orcus RAT ...ow.dll
windows7-x64
1Orcus RAT ...ow.dll
windows10-2004-x64
1Orcus RAT ...eo.dll
windows7-x64
1Orcus RAT ...eo.dll
windows10-2004-x64
1Orcus RAT ...ox.dll
windows7-x64
1Orcus RAT ...ox.dll
windows10-2004-x64
1Orcus RAT ...re.dll
windows7-x64
1Orcus RAT ...re.dll
windows10-2004-x64
1Orcus RAT ...Ex.dll
windows7-x64
1Orcus RAT ...Ex.dll
windows10-2004-x64
1Orcus RAT ...Ex.dll
windows7-x64
1Orcus RAT ...Ex.dll
windows10-2004-x64
1Orcus RAT ...ed.dll
windows7-x64
1Orcus RAT ...ed.dll
windows10-2004-x64
1Orcus RAT ...ed.dll
windows7-x64
1Orcus RAT ...ed.dll
windows10-2004-x64
1Orcus RAT ...er.dll
windows7-x64
1Orcus RAT ...er.dll
windows10-2004-x64
1Orcus RAT ...op.dll
windows7-x64
1Orcus RAT ...op.dll
windows10-2004-x64
1Orcus RAT ...it.dll
windows7-x64
1Orcus RAT ...it.dll
windows10-2004-x64
1Orcus RAT ...ib.dll
windows7-x64
1Orcus RAT ...ib.dll
windows10-2004-x64
1Orcus RAT ...rk.dll
windows7-x64
1Orcus RAT ...rk.dll
windows10-2004-x64
1Orcus RAT ...al.dll
windows7-x64
1Orcus RAT ...al.dll
windows10-2004-x64
1Orcus RAT ...ro.dll
windows7-x64
1Orcus RAT ...ro.dll
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
20-07-2024 15:55
Behavioral task
behavioral1
Sample
Orcus RAT 1.9.1/Orcus.Administration/Orcus.Administration.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Orcus RAT 1.9.1/Orcus.Administration/Orcus.Administration.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/AForge.Video.DirectShow.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/AForge.Video.DirectShow.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/AForge.Video.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/AForge.Video.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Be.Windows.Forms.HexBox.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Be.Windows.Forms.HexBox.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/CSCore.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/CSCore.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ControlzEx.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ControlzEx.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/DirectoryInfoEx.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/DirectoryInfoEx.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Exceptionless.Signed.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Exceptionless.Signed.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Exceptionless.Wpf.Signed.dll
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Exceptionless.Wpf.Signed.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/FluentCommandLineParser.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/FluentCommandLineParser.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/GongSolutions.WPF.DragDrop.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/GongSolutions.WPF.DragDrop.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ICSharpCode.AvalonEdit.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ICSharpCode.AvalonEdit.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ICSharpCode.SharpZipLib.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Lidgren.Network.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/Lidgren.Network.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/MahApps.Metro.IconPacks.Material.dll
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/MahApps.Metro.IconPacks.Material.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/MahApps.Metro.dll
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
Orcus RAT 1.9.1/Orcus.Administration/libraries/MahApps.Metro.dll
Resource
win10v2004-20240709-en
General
-
Target
Orcus RAT 1.9.1/Orcus.Administration/libraries/Exceptionless.Wpf.Signed.dll
-
Size
26KB
-
MD5
1b3a319b40f7cf78253d79ce3b8c0d42
-
SHA1
23b6d076946967e4921f97e024ed68b72cbfbe3b
-
SHA256
60cc0b13a13be7b36f2e1637b4d8f7f64ccef198bb258b318fde9c2810ac2447
-
SHA512
48ab69135c9f8c54eaf2c7b561ebf475d2a61e5911bcdf469b777f3bdea3d04697805fe09de7f81d57466e0904d2b625c7a1fd35e07f574c70ac70a6d486faf2
-
SSDEEP
384:4foIgJjjnB13YuPwfkaNOAsL6L5vGLxrZfvTOtDTjzImcOFz/Ym1T9yQT0B0Am9B:4foZjjBJiLxkOtDbcsz/9NVGZBw7