Analysis

  • max time kernel
    148s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-07-2024 15:55

General

  • Target

    Orcus RAT 1.9.1/Orcus.Administration/libraries/MahApps.Metro.dll

  • Size

    1.0MB

  • MD5

    735bea953b819dc0874176355e3e3141

  • SHA1

    8ff71613230d454ec27d7b7ee6795289751a5277

  • SHA256

    1af18a7eae467706f699dea9fcade9635ea2e331737501b72910413dfb12f17c

  • SHA512

    2963d60fd6c182fa01b62ada3894987ba34f317b5c0cb92905a92930d68a6eeca5f4511d3d36a4ed4a0c3e3851f3ca16683ce9e8d98567f8cc206b973fee5148

  • SSDEEP

    12288:3EAVRt0dmk6GmfvE4v4ICwQGZDHSxV/INvHG:3EAVRtOB6Gy/v4ICwQGZDHSxV/wvHG

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Orcus RAT 1.9.1\Orcus.Administration\libraries\MahApps.Metro.dll",#1
    1⤵
      PID:2572

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads