General
-
Target
Orbit.exe
-
Size
6.1MB
-
Sample
240901-sqr45sveqe
-
MD5
f4b3158c1d1f2dd284dc2e2a8273724b
-
SHA1
6d0676bec0ac12c7979d298e89d52846810d335a
-
SHA256
ca7fc2a95d45fd598f4508c2c6d91e673d22e7cfa34b3bd16133fe5f6129b858
-
SHA512
5c2953cf848fce08f7cbbd6ceb455bf46667ad53e41fea7b874128bf8b878dfedfc9dffaa6973b302c5f0e7336e29d435e9dd521c7d532fd0cb80c41acc74dbc
-
SSDEEP
196608:HOogzqJNdYV8xMf7d1TbKtg/l2RdlDp6zsoMuqzacU/m+6:upqJNo8xMzXSKlKdlD4zsoMuQO
Static task
static1
Behavioral task
behavioral1
Sample
Orbit.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Orbit.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
Orbit.exe
-
Size
6.1MB
-
MD5
f4b3158c1d1f2dd284dc2e2a8273724b
-
SHA1
6d0676bec0ac12c7979d298e89d52846810d335a
-
SHA256
ca7fc2a95d45fd598f4508c2c6d91e673d22e7cfa34b3bd16133fe5f6129b858
-
SHA512
5c2953cf848fce08f7cbbd6ceb455bf46667ad53e41fea7b874128bf8b878dfedfc9dffaa6973b302c5f0e7336e29d435e9dd521c7d532fd0cb80c41acc74dbc
-
SSDEEP
196608:HOogzqJNdYV8xMf7d1TbKtg/l2RdlDp6zsoMuqzacU/m+6:upqJNo8xMzXSKlKdlD4zsoMuQO
Score6/10-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-