General

  • Target

    Orqur.exe

  • Size

    8.8MB

  • MD5

    b11a6d1f6ecdb3dbb576aee355f83b56

  • SHA1

    ce99da9f64f2c00a9f47bd6a436e0677bcdb9b8e

  • SHA256

    af0086b6522424632523e28e39d416be80525b4db70ba1949f8fa5a66a4427ef

  • SHA512

    d18f04021bf84c1ce9d3154a540a8b202047bd79cee9fc5ba25883a685da22ab1b4f2e647b03e0f59d7fbba7aceb5c558c0ee9b63926bff32cf6a89d39ece41f

  • SSDEEP

    196608:tYnRG7NEQapv2OM4msC/307C1c/NDNqCsbTyi0oiu/HPR3YmOZdgkSI:en7/pu/4hC/4FuCaX0oiu/HPVmgkS

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Orqur.exe
    .exe windows:4 windows x64 arch:x64

    Password: 123


    Headers

    Sections