Overview

overview

10

Static

static

10

Orcus.Admi...on.exe

windows7-x64

10

Orcus.Admi...on.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Orcus.Administration.exe

  • Size

    16.2MB

  • Sample

    240903-3h37jszflr

  • MD5

    47c82b9e924c42876d6d4e40908888f7

  • SHA1

    b3ef96ff2f1833ffd332c5246e34ebdd47c7e250

  • SHA256

    26d5dadb8fec5f13b488f0532dbcf4d9cb4331ad1b7e7277ac9331fa39275528

  • SHA512

    83f41c85b51df8d80bc2b63f89d497fe979d340607137b7822b80b8da9f5fa3b9e358554ceedb807a29a38828c331a93f1f32569a66065a2b09c5d572764a9c0

  • SSDEEP

    393216:apC4606R60B8vYfZ9DfZ9DSK7SftLaeH+:NJOcPLPte

Score
10/10
orcusdiscoveryratspywarestealer

Malware Config

Targets

    • Target

      Orcus.Administration.exe

    • Size

      16.2MB

    • MD5

      47c82b9e924c42876d6d4e40908888f7

    • SHA1

      b3ef96ff2f1833ffd332c5246e34ebdd47c7e250

    • SHA256

      26d5dadb8fec5f13b488f0532dbcf4d9cb4331ad1b7e7277ac9331fa39275528

    • SHA512

      83f41c85b51df8d80bc2b63f89d497fe979d340607137b7822b80b8da9f5fa3b9e358554ceedb807a29a38828c331a93f1f32569a66065a2b09c5d572764a9c0

    • SSDEEP

      393216:apC4606R60B8vYfZ9DfZ9DSK7SftLaeH+:NJOcPLPte

    Score
    10/10
    orcusdiscoveryratspywarestealer

    • Orcus

      Orcus is a Remote Access Trojan that is being sold on underground forums.

      ratspywarestealerorcus

    • Orcurs Rat Executable

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks