orcus | e863500142b6bebd270bc2b83aa4990f20b91541635a5ad34c3ddd0e439825b7

General

Target

e863500142b6bebd270bc2b83aa4990f20b91541635a5ad34c3ddd0e439825b7
Size

1.2MB
MD5

47441caa38be61a3170701bec1bdef0d
SHA1

330c1fd094183648f05012ba7960c532bfac8a6b
SHA256

e863500142b6bebd270bc2b83aa4990f20b91541635a5ad34c3ddd0e439825b7
SHA512

0743db465c52701985019edda5e74e95a719d5d4cdded6499adf47f127f7a10b04d96b727c029d5f33973b6c246c970ebdb1b40fc3d327099d69723888d171f6
SSDEEP

24576:tMS04YNEMuExDiU6E5R9s8xY/2l/d0J5dtsPxNGfpoIbt+rJ:tk4auS+UjfU2Tg5XDxoIbt+r

Score

10^/10

Family

orcus

Botnet

my cutie pattoties

C2

/is-declare.gl.at.ply.gg

Mutex

3539315cdf2744b2bc9d6ed43638560a

Attributes

administration_rights_required
false
anti_debugger
false
anti_tcp_analyzer
false
antivm
false
autostart_method
1
change_creation_date
false
force_installer_administrator_privileges
false
hide_file
false
install
false
installation_folder
%appdata%\Microsoft\Speech\AudioDriver.exe
installservice
false
keylogger_enabled
false
newcreationdate
09/23/2024 00:30:57
plugins
AgUFl6aNkQPXkQKOmwKLvFcpr24sKCsVRABpAHMAYQBiAGwAZQAgAFcAZQBiAGMAYQBtACAATABpAGcAaAB0AHMABwMxAC4AMABBIGQANQAwAGIAZQA2ADMAMwBkAGUAYwBjADQAYQAwAGEAYgBmADQAZAA2AGIAYQAxADUAYgAzADYAMQAzADIAOAABBcjswb8CldcC3rcCqMa3DYpVf2wVCkcAYQBtAGUAcgAgAFYAaQBlAHcABwMxAC4AMgBBIDMAZgA2ADEANQBjADYAZgAwADcAMABiADQANABkADMAYQBhADIANgBjADgAOQBmADYAMgAwADUANgA5ADEAYwACAAAEBA==
reconnect_delay
10000
registry_autostart_keyname
Audio HD Driver
registry_hidden_autostart
false
set_admin_flag
false
tasksch_name
Audio HD Driver
tasksch_request_highest_privileges
false
try_other_autostart_onfail
false

aes.plain

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e863500142b6bebd270bc2b83aa4990f20b91541635a5ad34c3ddd0e439825b7