Overview
overview
10Static
static
10Orcus 1.9....on.exe
windows7-x64
3Orcus 1.9....on.exe
windows10-2004-x64
3Orcus 1.9....ow.dll
windows7-x64
1Orcus 1.9....ow.dll
windows10-2004-x64
1Orcus 1.9....eo.dll
windows7-x64
1Orcus 1.9....eo.dll
windows10-2004-x64
1Orcus 1.9....ox.dll
windows7-x64
1Orcus 1.9....ox.dll
windows10-2004-x64
1Orcus 1.9....re.dll
windows7-x64
1Orcus 1.9....re.dll
windows10-2004-x64
1Orcus 1.9....Ex.dll
windows7-x64
1Orcus 1.9....Ex.dll
windows10-2004-x64
1Orcus 1.9....ed.dll
windows7-x64
1Orcus 1.9....ed.dll
windows10-2004-x64
1Orcus 1.9....ed.dll
windows7-x64
1Orcus 1.9....ed.dll
windows10-2004-x64
1Orcus 1.9....er.dll
windows7-x64
1Orcus 1.9....er.dll
windows10-2004-x64
1Orcus 1.9....op.dll
windows7-x64
1Orcus 1.9....op.dll
windows10-2004-x64
1Orcus 1.9....it.dll
windows7-x64
1Orcus 1.9....it.dll
windows10-2004-x64
1Orcus 1.9....ib.dll
windows7-x64
1Orcus 1.9....ib.dll
windows10-2004-x64
1Orcus 1.9....rk.dll
windows7-x64
1Orcus 1.9....rk.dll
windows10-2004-x64
1Orcus 1.9....al.dll
windows7-x64
1Orcus 1.9....al.dll
windows10-2004-x64
1Orcus 1.9....ro.dll
windows7-x64
1Orcus 1.9....ro.dll
windows10-2004-x64
1Orcus 1.9....ks.dll
windows7-x64
1Orcus 1.9....ks.dll
windows10-2004-x64
1Analysis
-
max time kernel
93s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14/09/2024, 15:31
Behavioral task
behavioral1
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/Orcus.Administration.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/Orcus.Administration.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/AForge.Video.DirectShow.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/AForge.Video.DirectShow.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/AForge.Video.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/AForge.Video.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Be.Windows.Forms.HexBox.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Be.Windows.Forms.HexBox.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/CSCore.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/CSCore.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/DirectoryInfoEx.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/DirectoryInfoEx.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Exceptionless.Signed.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Exceptionless.Signed.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Exceptionless.Wpf.Signed.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Exceptionless.Wpf.Signed.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/FluentCommandLineParser.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/FluentCommandLineParser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/GongSolutions.Wpf.DragDrop.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/GongSolutions.Wpf.DragDrop.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/ICSharpCode.AvalonEdit.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/ICSharpCode.AvalonEdit.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/ICSharpCode.SharpZipLib.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20240910-en
Behavioral task
behavioral25
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Lidgren.Network.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Lidgren.Network.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/MahApps.Metro.IconPacks.Material.dll
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/MahApps.Metro.IconPacks.Material.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/MahApps.Metro.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/MahApps.Metro.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Microsoft.Threading.Tasks.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Microsoft.Threading.Tasks.dll
Resource
win10v2004-20240802-en
General
-
Target
Orcus 1.9.1 Anti-Takedown/Modded Client/libraries/Exceptionless.Wpf.Signed.dll
-
Size
25KB
-
MD5
ef36a316751603cdcb9c3f5da42b3b60
-
SHA1
29a40cb67bb07e53a6bd28362f3912050f1ddd18
-
SHA256
78fdd30a20ee50f88602059f0940acc92d9bfc09bc5ebebe99372d2a5af7342a
-
SHA512
c5efc98b648d7c946f13b2e9af1cb46eae5522a4f17482fd9fa3c95551f0e53d2a9abb4a29959652626a8df4430ddf41c2adaf95d281474a77d1307657fbec33
-
SSDEEP
384:nfoIgNjjnx1hkuPwfkaNOAsL6L2pNLxrZfvTOtDTjzImcOFz/Ym1T9yQT0B0Am9d:nfodjjx/iLsBOtDbcsz/9NV66n