Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 15:31

General

  • Target

    Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Exceptionless.Wpf.Signed.dll

  • Size

    25KB

  • MD5

    ef36a316751603cdcb9c3f5da42b3b60

  • SHA1

    29a40cb67bb07e53a6bd28362f3912050f1ddd18

  • SHA256

    78fdd30a20ee50f88602059f0940acc92d9bfc09bc5ebebe99372d2a5af7342a

  • SHA512

    c5efc98b648d7c946f13b2e9af1cb46eae5522a4f17482fd9fa3c95551f0e53d2a9abb4a29959652626a8df4430ddf41c2adaf95d281474a77d1307657fbec33

  • SSDEEP

    384:nfoIgNjjnx1hkuPwfkaNOAsL6L2pNLxrZfvTOtDTjzImcOFz/Ym1T9yQT0B0Am9d:nfodjjx/iLsBOtDbcsz/9NV66n

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Orcus 1.9.1 Anti-Takedown\Modded Client\libraries\Exceptionless.Wpf.Signed.dll",#1
    1⤵
      PID:2720

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads